Apple patch fixes zero-day kernel hole reported by Kaspersky – update now!
Credit to Author: Paul Ducklin| Date: Thu, 22 Jun 2023 00:36:20 +0000
Apple didn’t use the words “Triangulation Trojan”, but you probably will.
Read morezero day
S3 Ep138: I like to MOVEit, MOVEit
Credit to Author: Paul Ducklin| Date: Thu, 08 Jun 2023 16:56:23 +0000
Backdoors, exploits, and Little Bobby Tables. Listen now! (Full transcript available…)
Read moreChrome and Edge zero-day: “This exploit is in the wild”, so check your versions now
Credit to Author: Paul Ducklin| Date: Tue, 06 Jun 2023 18:28:43 +0000
Chrome 0-day patched now, Edge patch coming soon.
Read moreChrome zero-day: “This exploit is in the wild”, so check your version now
Credit to Author: Paul Ducklin| Date: Tue, 06 Jun 2023 16:28:43 +0000
Chrome 0-day patched now, Edge patch coming soon.
Read moreApple delivers first-ever Rapid Security Response “cyberattack” patch – leaves some users confused
Credit to Author: Paul Ducklin| Date: Mon, 01 May 2023 20:46:09 +0000
Just when we’d got used to three-numbered versions, such as “13.3.1”, here comes an update suffix, bringing you “13.3.1 (a)”…
Read moreDouble zero-day in Chrome and Edge – check your versions now!
Credit to Author: Paul Ducklin| Date: Mon, 24 Apr 2023 16:59:17 +0000
Wouldn’t it be handy if there were a single version number to check for in every Chromium-based browser, on every supported platform?
Read moreUpdate now, there’s a Chrome zero-day in the wild
Categories: News Tags: chrome Tags: browser Tags: update Tags: vulnerability Tags: CVE Tags: exploit Tags: exploitation Tags: zero-day Users of Chrome should ensure they’re running the latest version to patch an integer overflow in the Skia graphics library. |
The post Update now, there’s a Chrome zero-day in the wild appeared first on Malwarebytes Labs.
Read more3CX Breach Was a Double Supply Chain Compromise
Credit to Author: BrianKrebs| Date: Fri, 21 Apr 2023 01:05:44 +0000
We learned some remarkable new details this week about the recent supply-chain attack on VoIP software provider 3CX, a complex, lengthy intrusion that has the makings of a cyberpunk spy novel: North Korean hackers using legions of fake executive accounts on LinkedIn to lure people into opening malware disguised as a job offer; malware targeting Mac and Linux users working at defense and cryptocurrency firms; and software supply-chain attacks nested within earlier supply chain attacks.
Read moreS3 Ep130: Open the garage bay doors, HAL [Audio + Text]
Credit to Author: Paul Ducklin| Date: Thu, 13 Apr 2023 16:54:01 +0000
I’m sorry, Dave. I’m afraid I can’t… errr, no, hang on a minute, I can do that easily! Worldwide! Right now!
Read morePatch Tuesday: Microsoft fixes a zero-day, and two curious bugs that take the Secure out of Secure Boot
Credit to Author: Paul Ducklin| Date: Wed, 12 Apr 2023 18:57:23 +0000
Is Secure Boot without the Secure just “Boot”?
Read more