Slack fixes account-stealing bug

Credit to Author: Danny Bradbury| Date: Tue, 17 Mar 2020 12:33:43 +0000

Slack has fixed a bug that allowed attackers to hijack user accounts by tampering with their HTTP sessions.<img src=”http://feeds.feedburner.com/~r/nakedsecurity/~4/i-F9hS91EoQ” height=”1″ width=”1″ alt=””/>

Read more

Tor browser fixes bug that allows JavaScript to run when disabled

Credit to Author: John E Dunn| Date: Tue, 17 Mar 2020 12:16:27 +0000

The Tor browser has a bug that could allow JavaScript to execute on websites even when users think they’ve disabled it for maximum anonymity.<img src=”http://feeds.feedburner.com/~r/nakedsecurity/~4/es39u8LUhmk” height=”1″ width=”1″ alt=””/>

Read more

Microsoft patches wormable Windows 10 ‘SMBGhost’ flaw

Credit to Author: John E Dunn| Date: Mon, 16 Mar 2020 11:58:56 +0000

What’s the difference between a scheduled security update and one that’s out-of-band? In this case, it’s two days.<img src=”http://feeds.feedburner.com/~r/nakedsecurity/~4/OqgpMudTrew” height=”1″ width=”1″ alt=””/>

Read more

Open source bugs have soared in the past year

Credit to Author: Danny Bradbury| Date: Mon, 16 Mar 2020 10:55:41 +0000

Open source bugs have skyrocketed, according to a report from WhiteSource, with XSS flaws account for a quarter of those bugs.<img src=”http://feeds.feedburner.com/~r/nakedsecurity/~4/ex96Deh5Pk4″ height=”1″ width=”1″ alt=””/>

Read more

Nvidia patches severe flaws affecting GeForce, Quadro NVS and Tesla

Credit to Author: John E Dunn| Date: Tue, 03 Mar 2020 11:09:05 +0000

In all, the update covers five Windows and Linux desktop CVE vulnerabilities, including one rated as critical.<img src=”http://feeds.feedburner.com/~r/nakedsecurity/~4/YitOMgSO498″ height=”1″ width=”1″ alt=””/>

Read more

XSS plugin vulnerabilities plague WordPress users

Credit to Author: Danny Bradbury| Date: Tue, 03 Mar 2020 10:44:44 +0000

Thousands of active WordPress plugins have been hit with a swathe of XSS vulnerabilities that could give attackers complete control of the site.<img src=”http://feeds.feedburner.com/~r/nakedsecurity/~4/Bjh4-1ye-9E” height=”1″ width=”1″ alt=””/>

Read more

Ironpie robot vacuum can suck up your privacy

Credit to Author: Lisa Vaas| Date: Mon, 02 Mar 2020 12:37:11 +0000

You might want to unplug this not-so-smart robot: researchers found they can watch video streams piped out from its security camera.<img src=”http://feeds.feedburner.com/~r/nakedsecurity/~4/kGtvD8tF-C4″ height=”1″ width=”1″ alt=””/>

Read more