vulnerability – Page 39 – PossibleThreat Articles

Signal immediately fixed FaceTime-style eavesdropping bug

October 8, 2019 0 Comments Android, Apple, Bug, eavesdropping, facetime, Google, Google Project Zero, iOS, Mobile, Privacy, security threats, signal, signal bug, vulnerability

Credit to Author: Danny Bradbury| Date: Tue, 08 Oct 2019 11:25:17 +0000

Remember the FaceTime bug that allowed a caller to eavesdrop on your phone? Researchers just discovered another – this time in Signal.<img src=”http://feeds.feedburner.com/~r/nakedsecurity/~4/kuYuPSST8YI” height=”1″ width=”1″ alt=””/>

Security Sophos

Android devices hit by zero-day exploit Google thought it had patched

October 7, 2019 0 Comments Android, cve-2019-2215, Google, Google Project Zero, Mobile, nso group, Operating Systems, pegasus, Privacy, security threats, vulnerability, zero-day vulnerability

Credit to Author: John E Dunn| Date: Mon, 07 Oct 2019 11:41:15 +0000

Android smartphones are vulnerable to a zero-day exploit that Google thought it had patched for good two years ago.<img src=”http://feeds.feedburner.com/~r/nakedsecurity/~4/9TX4gOYOCsQ” height=”1″ width=”1″ alt=””/>

Security Sophos

WhatsApp vulnerability could compromise Android smartphones

October 4, 2019 0 Comments Android, cve-2019-11932, CVEs, double free memory vulnerability, facebook, malicious gif, Privacy, rce, remote code execution, security threats, vulnerability, whatsapp

Credit to Author: John E Dunn| Date: Fri, 04 Oct 2019 12:10:03 +0000

A researcher has released details of a WhatsApp flaw that could be used to compromise the app and the mobile device the app is running on.<img src=”http://feeds.feedburner.com/~r/nakedsecurity/~4/fPnnKlP45pM” height=”1″ width=”1″ alt=””/>

Security Sophos

PDF encryption standard weaknesses uncovered

October 3, 2019 0 Comments Adobe, aes symmetric encryption, cipher block chaining, direct exfiltration, PDF, pdf encryption, security threats, vulnerability

Credit to Author: John E Dunn| Date: Thu, 03 Oct 2019 12:12:48 +0000

Researchers have discovered weaknesses in PDF encryption which could be exploited to reveal the plaintext contents of a file to an attacker.<img src=”http://feeds.feedburner.com/~r/nakedsecurity/~4/yigSKdsoe6I” height=”1″ width=”1″ alt=””/>

Security Sophos

Exim suffers another ‘critical’ remote code execution flaw

October 2, 2019 0 Comments critical flaw, cve-2019-16928, CVEs, email server, Exim, rce, remote code execution, security threats, vulnerability

Credit to Author: John E Dunn| Date: Wed, 02 Oct 2019 12:28:02 +0000

This latest Exim flaw could lead to at least a denial of service crash in the software but also the possibility of remote code execution.<img src=”http://feeds.feedburner.com/~r/nakedsecurity/~4/MxuCX_Qs0nA” height=”1″ width=”1″ alt=””/>

Security Sophos

Hacking 2020 voting systems is a ‘piece of cake’

October 1, 2019 0 Comments 2020 election, default passwords, Defcon, election systems, election tampering, elections, Government security, matt blaze, poor encryption, security threats, voting machines, voting village, vulnerability

Credit to Author: Lisa Vaas| Date: Tue, 01 Oct 2019 11:31:59 +0000

That’s how Senator Wyden described the results of DefCon’s Voting Village, where all of 100 voting systems were easily picked apart by hackers.<img src=”http://feeds.feedburner.com/~r/nakedsecurity/~4/buAZK9dzyQA” height=”1″ width=”1″ alt=””/>

MalwareBytes Security

New iOS exploit checkm8 allows permanent compromise of iPhones

September 27, 2019 0 Comments Apple, apple security, apple vulnerability, checkm8, Exploit, exploits, iOS, ios exploit, mac, vulnerability

Credit to Author: Thomas Reed| Date: Fri, 27 Sep 2019 16:48:42 +0000

A new exploit for iOS enables attackers to gain permanent access to iPhones, iPads, Apple Watches, and more—with zero potential for patching. Learn why this is possibly the biggest security news for iOS since its inception.

Categories:

Tags: Apple apple security apple vulnerability checkm8 exploit exploits iOS iOS exploit vulnerability

Security Sophos

Apple users, patch now! The ‘bug that got away’ has been fixed

September 27, 2019 0 Comments Apple, cve-2019-8641, Google, iPhone, mac, Patch, rce, vulnerability

Credit to Author: Paul Ducklin| Date: Fri, 27 Sep 2019 13:13:21 +0000

Apple has now patched the patch that Google said didn’t patch the hole it was supposed to.<img src=”http://feeds.feedburner.com/~r/nakedsecurity/~4/vMQXw1rIjGw” height=”1″ width=”1″ alt=””/>

Security Sophos

Update ColdFusion now! Emergency patch for critical flaws

September 26, 2019 0 Comments Adobe, adobe coldfusion, critical flaw, security threats, vulnerability

Credit to Author: John E Dunn| Date: Thu, 26 Sep 2019 10:16:54 +0000

Adobe has rushed out fixes for three vulnerabilities in its ColdFusion web development platform, two of which have been given the top billing of ‘critical’.<img src=”http://feeds.feedburner.com/~r/nakedsecurity/~4/GUGdeqtu7ac” height=”1″ width=”1″ alt=””/>

Security Sophos

Microsoft rushes out fix for Internet Explorer zero-day

September 25, 2019 0 Comments cve-2019-1255, cve-2019-1367, CVEs, ie, Internet Explorer, Microsoft, Operating Systems, Patch, Patching, security threats, vulnerability, Web Browsers, Windows, Windows 10, windows defender, zero-day vulnerability

Credit to Author: John E Dunn| Date: Wed, 25 Sep 2019 11:48:58 +0000

Microsoft has rushed to patch two flaws affecting IE versions 9 to 11, one of which the company says is being exploited in real attacks.<img src=”http://feeds.feedburner.com/~r/nakedsecurity/~4/JKx5VMBH6xs” height=”1″ width=”1″ alt=””/>