FreshRSS

🔒
❌ Secure Planet Training Courses Updated For 2019 - Click Here
☷
△ 🔃
There are new available articles, click to refresh the page.
Before yesterdayNaked Security

S3 Ep138: I like to MOVEit, MOVEit

By: Paul Ducklin
Backdoors, exploits, and Little Bobby Tables. Listen now! (Full transcript available...)

s3-ep138-1200

Google wins court order to force ISPs to filter botnet traffic

By: Naked Security writer
CryptBot criminals are alleged to have plundered browser passwords, illicitly-snapped screenshots, cryptocurrency account data, and more.

S3 Ep132: Proof-of-concept lets anyone hack at will

By: Paul Ducklin
When Doug says, "Happy Remote Code Execution Day, Duck"... it's irony. For the avoidance of all doubt :-)

Google leaking 2FA secrets – researchers advise against new “account sync” feature for now

By: Paul Ducklin
You waited 13 years for this feature in Google Authenticator. Now researchers are advising you to wait a while longer, just in case...

Double zero-day in Chrome and Edge – check your versions now!

By: Paul Ducklin
Wouldn't it be handy if there were a single version number to check for in every Chromium-based browser, on every supported platform?

S3 Ep131: Can you really have fun with FORTRAN?

By: Paul Ducklin
Loop-the-loop in this week's episode. Entertaining, educational and all in plain English. Transcript inside.

FBI and FCC warn about “Juicejacking” – but just how useful is their advice?

By: Paul Ducklin
USB charging stations - can you trust them? What are the real risks, and how can you keep your data safe on the road?

Google Pixel phones had a serious data leakage bug – here’s what to do!

By: Paul Ducklin
What if the "safe" images you shared after carefully cropping them... had some or all of the "unsafe" pixels left behind anyway?

Dangerous Android phone 0-day bugs revealed – patch or work around them now!

By: Paul Ducklin
Despite its usually inflexible 0-day disclosure policy, Google is keeping four mobile modem bugs semi-secret due to likely ease of exploitation.

Chrome fixes 8th zero-day of 2022 – check your version now (Edge too!)

By: Paul Ducklin
There isn't a rhyme to remind you which months have browser zero-days... you just have to keep your eyes and ears open!

Chrome issues urgent zero-day fix – update now!

By: Paul Ducklin
We've said it before/And we'll say it again/It's not *if* you should patch/It's a matter of *when*. (Hint: now!)

Chrome and Edge fix zero-day security hole – update now!

By: Paul Ducklin
This time, the crooks got there first - only 1 security hole patched, but it's a zero-day.

You didn’t leave enough space between ROSE and AND, and AND and CROWN

By: Paul Ducklin
What weird Google Docs bug connects the words THEREFORE, AND, SECONDLY, WHY, BUT and BESIDES?

Yet another Chrome zero-day emergency update – patch now!

By: Paul Ducklin
The third emergency Chrome 0-day in three months - the first one was exploited by North Korea, so you might as well get this one ASAP.

“Dirty Pipe” Linux kernel bug lets anyone write to any file

By: Paul Ducklin
Even read-only files can be written to, leading to a dangerously general purpose elevation-of-privilege attack.

pipe-1200

Google announces zero-day in Chrome browser – update now!

By: Paul Ducklin
Zero-day buses: none for a while, then three at once. Here's Google joining Apple and Adobe in "zero-day week"

Cloud Security: Don’t wait until your next bill to find out about an attack!

By: Paul Ducklin
Cloud security is the best sort of altruism: you need to do it to protect yourself, but you help to protect everyone else at the same time.

❌