Chrome and Edge zero-day: “This exploit is in the wild”, so check your versions now
Credit to Author: Paul Ducklin| Date: Tue, 06 Jun 2023 18:28:43 +0000
Chrome 0-day patched now, Edge patch coming soon.
Read moreSophos
Update 1: Information on MOVEit Transfer and MOVEit Cloud Vulnerability CVE-2023-34362
Credit to Author: Christopher Budd| Date: Mon, 05 Jun 2023 21:50:09 +0000
Users of the file-transfer package should apply patches immediately and check for indications of possible compromise
Read moreChrome zero-day: “This exploit is in the wild”, so check your version now
Credit to Author: Paul Ducklin| Date: Tue, 06 Jun 2023 16:28:43 +0000
Chrome 0-day patched now, Edge patch coming soon.
Read moreInformation on MOVEit Transfer and MOVEit Cloud Vulnerability CVE-2023-34362
Credit to Author: Christopher Budd| Date: Mon, 05 Jun 2023 21:50:09 +0000
Users of the file-transfer package should apply patches immediately and check for indications of possible compromise
Read moreMOVEit zero-day exploit used by data breach gangs: The how, the why, and what to do…
Credit to Author: Paul Ducklin| Date: Mon, 05 Jun 2023 17:59:29 +0000
Little Bobby Tables is back!
Read moreResearchers claim Windows “backdoor” affects hundreds of Gigabyte motherboards
Credit to Author: Paul Ducklin| Date: Fri, 02 Jun 2023 13:56:58 +0000
It’s a backdoor, Jim, but not as we know it… here’s a sober look at this issue.
Read moreS3 Ep137: 16th century crypto skullduggery
Credit to Author: Paul Ducklin| Date: Thu, 01 Jun 2023 16:45:58 +0000
Lots to learn, clearly explained in plain English… listen now! (Full transcript inside.)
Read moreSerious Security: That KeePass “master password crack”, and what we can learn from it
Credit to Author: Paul Ducklin| Date: Wed, 31 May 2023 17:39:00 +0000
Here, in an admittedly discursive nutshell, is the fascinating story of CVE-2023-32784. (Short version: Don’t panic.)
Read moreSophos NDR Live Discover reports are now available
Credit to Author: Karl Ackerman| Date: Wed, 31 May 2023 02:14:04 +0000
These new queries and reports are available for free to all licensed NDR customers.
Read moreSerious Security: Verification is vital – examining an OAUTH login bug
Credit to Author: Paul Ducklin| Date: Tue, 30 May 2023 16:59:21 +0000
What good is a popup asking for your approval if an attacker can bypass it simply by suppressing it?
Read more