Urgent! Apple fixes critical zero-day hole in iPhones, iPads and Macs

By: Paul Ducklin — July 10^th 2023 at 23:12

Don't delay, do it today. This is a code-implantation bug in WebKit that attackers already know how to exploit.

Popular JWT cloud security library patches “remote” code execution hole

By: Paul Ducklin — January 10^th 2023 at 17:59

It's remotely triggerable, but attackers would already have pretty deep network access if they could "prime" your server for compromise.

By: Paul Ducklin — October 26^th 2022 at 16:58

Don't be a cybersecurity slowcoach - you need to spot possible attacks as soon as you can.

By: Paul Ducklin — August 31^st 2022 at 18:42

Patch as soon as you can - that recent WebKit zero-day affecting new iPhones and iPads is apparently being used against older models, too.

By: Paul Ducklin — June 13^th 2022 at 16:28

Live demo, plain English, no sales pitch, just a chance to watch an attack dissected in safety. Join us if you can!

By: Paul Ducklin — June 2^nd 2022 at 15:37

Latest episode - listen now!

By: Paul Ducklin — May 26^th 2022 at 12:41

When you really need to make exceptions in cybersecurity, specify them as explicitly as you can.

By: Paul Ducklin — April 14^th 2022 at 13:39

Latest episode - listen now!

By: Paul Ducklin — April 6^th 2022 at 16:22

Why are Tor sites hard to locate and therefore difficult to take down? We explain in plain English...

By: Paul Ducklin — January 18^th 2022 at 17:23

There's a tiny data leakage bug in the WebKit browser engine... but it could act as a "supercookie" identifier for your browsing

By: Paul Ducklin — December 21^st 2021 at 17:57

The Apache web server just got an update - this one is nothing to do with Log4j!