S3 Ep138: I like to MOVEit, MOVEit

By: Paul Ducklin — June 8^th 2023 at 16:56

Backdoors, exploits, and Little Bobby Tables. Listen now! (Full transcript available...)

s3-ep138-1200

Naked Security

Chrome and Edge zero-day: “This exploit is in the wild”, so check your versions now

By: Paul Ducklin — June 6^th 2023 at 18:28

Chrome and Edge 0-days patched.

Naked Security

Mac malware-for-hire steals passwords and cryptocoins, sends “crime logs” via Telegram

By: Paul Ducklin — April 30^th 2023 at 01:23

These malware peddlers are specifically going after Mac users. The hint's in the name: "Atomic macOS Stealer", or AMOS for short.

Naked Security

S3 Ep132: Proof-of-concept lets anyone hack at will

By: Paul Ducklin — April 27^th 2023 at 16:55

When Doug says, "Happy Remote Code Execution Day, Duck"... it's irony. For the avoidance of all doubt :-)

Naked Security

Double zero-day in Chrome and Edge – check your versions now!

By: Paul Ducklin — April 24^th 2023 at 16:59

Wouldn't it be handy if there were a single version number to check for in every Chromium-based browser, on every supported platform?

Naked Security

S3 Ep112: Data breaches can haunt you more than once! [Audio + Text]

By: Paul Ducklin — December 9^th 2022 at 16:46

Breaches, exploits, busts, buffer overflows and bug hunting - entertaining and educational in equal measure.

Naked Security

Number Nine! Chrome fixes another 2022 zero-day, Edge patched too

By: Paul Ducklin — December 5^th 2022 at 00:58

Ninth more unto the breach, dear friends, ninth more.

Naked Security

Chrome fixes 8th zero-day of 2022 – check your version now (Edge too!)

By: Paul Ducklin — November 28^th 2022 at 19:42

There isn't a rhyme to remind you which months have browser zero-days... you just have to keep your eyes and ears open!

Naked Security

Chrome issues urgent zero-day fix – update now!

By: Paul Ducklin — October 29^th 2022 at 15:08

We've said it before/And we'll say it again/It's not *if* you should patch/It's a matter of *when*. (Hint: now!)

Naked Security

Chrome and Edge fix zero-day security hole – update now!

By: Paul Ducklin — September 5^th 2022 at 15:12

This time, the crooks got there first - only 1 security hole patched, but it's a zero-day.

Naked Security

S3 Ep98: The LastPass saga – should we stop using password managers? [Audio + Text]

By: Paul Ducklin — September 1^st 2022 at 16:55

Latest episode - listen now!

Naked Security

Chrome patches 24 security holes, enables “Sanitizer” safety system

By: Paul Ducklin — August 31^st 2022 at 11:48

24 existing bugs fixed. And, we hope, numerous potential future bugs prevented.

Naked Security

S3 Ep97: Did your iPhone get pwned? How would you know? [Audio + Text]

By: Paul Ducklin — August 25^th 2022 at 15:37

Latest episode - listen now! (Or read the transcript if you prefer the text version.)

Naked Security

Chrome browser gets 11 security fixes with 1 zero-day – update now!

By: Paul Ducklin — August 17^th 2022 at 13:16

Don't delay - patch today.

Naked Security

S3 Ep90: Chrome 0-day again, True Cybercrime, and a 2FA bypass [Podcast + Transcript]

By: Paul Ducklin — July 7^th 2022 at 14:46

Listen now! Or read if you prefer...

Naked Security

Google patches “in-the-wild” Chrome zero-day – update now!

By: Paul Ducklin — July 5^th 2022 at 15:55

Running Chrome? Do the "Help-About-Update" dance move right now, just to be sure...

Naked Security

Who’s watching your webcam? The Screencastify Chrome extension story…

By: Paul Ducklin — May 26^th 2022 at 12:41

When you really need to make exceptions in cybersecurity, specify them as explicitly as you can.

Naked Security

Yet another Chrome zero-day emergency update – patch now!

By: Paul Ducklin — April 16^th 2022 at 00:33

The third emergency Chrome 0-day in three months - the first one was exploited by North Korea, so you might as well get this one ASAP.

Naked Security

S3 Ep76: Deadbolt, LAPSUS$, Zlib, and a Chrome 0-day [Podcast]

By: Paul Ducklin — March 31^st 2022 at 13:38

Latest episode - listen now!

Naked Security

Google Chrome patches mysterious new zero-day bug – update now

By: Paul Ducklin — March 28^th 2022 at 14:18

CVE-2022-1096 - another mystery in-the-wild 0-day in Chrome... check your version now!

Naked Security

Did we learn nothing from Y2K? Why are some coders still stuck on two digit numbers?

By: Paul Ducklin — February 25^th 2022 at 17:59

Calling all website coders: Y2K was then. V1H is now!

Naked Security

Google announces zero-day in Chrome browser – update now!

By: Paul Ducklin — February 15^th 2022 at 19:17

Zero-day buses: none for a while, then three at once. Here's Google joining Apple and Adobe in "zero-day week"