vulnerability – Page 43 – PossibleThreat Articles

Firefox fixes “master password” security bypass bug

August 15, 2019 0 Comments 2fa, firefox, Mozilla, password manager, Patch, vulnerability

Credit to Author: Paul Ducklin| Date: Thu, 15 Aug 2019 16:11:46 +0000

The bug’s in Firefox, but our advice is worth reading whether you use Firefox or not.<img src=”http://feeds.feedburner.com/~r/nakedsecurity/~4/SGS2jipuYaM” height=”1″ width=”1″ alt=””/>

Security Sophos

Serious flaws in six printer brands discovered, fixed

August 15, 2019 0 Comments Brother, cross-site scripting, Denial of Service, flaws, hardware security, Kyocera, Lexmark, printer security, printers, remote code execution, Ricoh, security threats, vulnerability, Xerox

Credit to Author: Danny Bradbury| Date: Thu, 15 Aug 2019 13:03:19 +0000

There are many ways to compromise company data, but IT teams often overlook one of the most serious: the humble printer.<img src=”http://feeds.feedburner.com/~r/nakedsecurity/~4/nskUwQnmN2Q” height=”1″ width=”1″ alt=””/>

Security Sophos

Hacked devices can be turned into acoustic weapons

August 13, 2019 0 Comments acoustic cyber weapons, bluetooth, DEF CON, Def Con 2019, Defcon, malware, Matt Wixey, PricewaterhouseCoopers, PwC, research, security threats, sounds, soundwaves, vulnerability, Wi-fi

Credit to Author: Lisa Vaas| Date: Tue, 13 Aug 2019 13:54:10 +0000

Security researcher Matt Wixey found that many gadgets aren’t protected from being turned into hearing-damaging weapons. Or melting.<img src=”http://feeds.feedburner.com/~r/nakedsecurity/~4/S9CML6xBVTQ” height=”1″ width=”1″ alt=””/>

Security Sophos

Hacking 4G hotspots – when did you last update?

August 12, 2019 0 Comments hotspot, vulnerability, Wi-fi

Credit to Author: Paul Ducklin| Date: Mon, 12 Aug 2019 15:04:22 +0000

Your 4G hotspot might seem very basic and low risk compared to your phone, but you need to keep it patched just as carefully!<img src=”http://feeds.feedburner.com/~r/nakedsecurity/~4/bLbnSDKyWeU” height=”1″ width=”1″ alt=””/>

Security Sophos

Apple will hand out unlocked iPhones to vetted researchers

August 12, 2019 0 Comments Apple, Black Hat, bounties, dev-fused iPhone, ethical hackers, hackerone, iOS, iOS Security Research Device Program, iPhones, jailbroken, MacOS, Mobile, Operating Systems, security threats, vulnerability

Credit to Author: Lisa Vaas| Date: Mon, 12 Aug 2019 11:44:22 +0000

It formalizes the reality: “pre-jailbroken” iPhones were already on the black market.<img src=”http://feeds.feedburner.com/~r/nakedsecurity/~4/SFMBPoyjIsk” height=”1″ width=”1″ alt=””/>

Security Sophos

Update your iPhone – remote control holes revealed by researchers

August 8, 2019 0 Comments Apple, Exploit, Google, Hacking, iPhone, Project Zero, vulnerability

Credit to Author: Paul Ducklin| Date: Thu, 08 Aug 2019 14:01:41 +0000

You might not think your phone is as exposed as an internet server – but it’s handling plenty of untrusted data from unknown sources!<img src=”http://feeds.feedburner.com/~r/nakedsecurity/~4/Ri0849b3RDo” height=”1″ width=”1″ alt=””/>

Security Sophos

Cisco 220 Series Smart Switch owners told to apply urgent patch

August 8, 2019 0 Comments Cisco, Cisco 220 Series switch, vulnerability

Credit to Author: John E Dunn| Date: Thu, 08 Aug 2019 12:45:34 +0000

Businesses running any of Cisco’s 220 Series Smart Switches have some urgent patching work on their hands.<img src=”http://feeds.feedburner.com/~r/nakedsecurity/~4/K1mhEB2NowY” height=”1″ width=”1″ alt=””/>

Microsoft Security

A case study in industry collaboration: Poisoned RDP vulnerability disclosure and response

August 7, 2019 0 Comments CVE-2019-0887, cybersecurity, Endpoint security, Event Tracing for Windows (ETW), Exploit, Microsoft Defender Advanced Threat Protection, Microsoft security intelligence, Remote Desktop Protocol (RDP), Security Response, vulnerability, Windows Security

Credit to Author: Eric Avena| Date: Wed, 07 Aug 2019 23:50:25 +0000

Through a cross-company, cross-continent collaboration, we discovered a vulnerability, secured customers, and developed fix, all while learning important lessons that we can share with the industry.

The post A case study in industry collaboration: Poisoned RDP vulnerability disclosure and response appeared first on Microsoft Security .

Security Sophos

Latest Android patches fix critical ‘QualPwn’ Wi-Fi flaws

August 7, 2019 0 Comments Android, Patching, QualPwn, Tencent, vulnerability, Wi-fi

Credit to Author: John E Dunn| Date: Wed, 07 Aug 2019 10:51:31 +0000

The August 2019 security bulletin is out – and two of the critical flaws could allow an attacker to compromise the Android system kernel.<img src=”http://feeds.feedburner.com/~r/nakedsecurity/~4/m81QAZNMBuw” height=”1″ width=”1″ alt=””/>

Security Sophos

Hackers exploit SMS gateways to text millions of US numbers

August 5, 2019 0 Comments Chromecast, PewDiePie, printers, SMS, SMS gateways, SMS spam, vulnerability

Credit to Author: John E Dunn| Date: Mon, 05 Aug 2019 14:18:49 +0000

Receive any strange SMS text messages recently? If you live in the US, there’s a small chance you might have received an SMS with the following text in the last few days from someone called ‘j3ws3r on Twitter’: I’m here to warn the masses about SMS email gateways. Please look up how to disable it […]<img src=”http://feeds.feedburner.com/~r/nakedsecurity/~4/AeqxEVgRJLM” height=”1″ width=”1″ alt=””/>