S3 Ep60: Exchange exploit, GoDaddy breach and cookies made public [Podcast]
Latest episode – listen now! Solid cybersecurity advice in plain English.
Want to know more about this topic or about us? Contact us!
Latest episode – listen now! Solid cybersecurity advice in plain English.
Latest episode – listen now!
Fake heads! (Cue dystopian scifi music.)
Got Linux? Here’s a bug you weren’t expecting, in software you might not know you have.
Double trouble: two zero-days, patched in the same emergency update. So please don’t delay – patch today!
by Paul Ducklin Yesterday, we wrote about a vaguely mysterious zero-day patch pushed out by Apple. Like almost all Apple security fixes, the update arrived without any sort of warning, but unlike most Apple updates, only a single bug was listed on the “fix list,” and even by Apple’s brisk . . . Read more
by Paul Ducklin You might be forgiven for thinking that July 2021 was Microsoft’s month for cybersecurity vulnerabilities. First there was PrintNightmare in several guises, followed by HiveNightmare (an entirely unrelated bug that nevertheless attracted the “Nightmare” moniker), followed by PetitPotam (which went down the cute aquatic mammal naming path). . . . Read more
by Paul Ducklin It’s already nearly two months since Apple’s last security update to iOS 14, which was back on 2021-05-24 when iOS 14.6 appeared. So we weren’t surprised to see that another patch is out, officially listed [2021-07-19] as covering iOS (now on 14.7), tvOS (now also 14.7) and . . . Read more
by Paul Ducklin There’s a famous and very catchy song that starts, “It was 20 years ago today…” In the song, of course, Sergeant Pepper was busily teaching his band to play – a band, as the song assures us, that was guaranteed to raise a smile. But can you . . . Read more
by Paul Ducklin Researchers at SentinelLabs say that they found various exploitable bugs in one of Dell’s Windows kernel drivers, which they reported back in December 2020. There were five related bugs, now collectively dubbed CVE-2021-21551. Dell has now issued a patch for these vulnerabilities (the official update is dated . . . Read more