Flaw imperils Safari – and every iOS browser because of Cupertino's T&Cs Apple on Thursday patched a zero-day security vulnerability in its WebKit browser engine, issuing updates for iOS, iPadOS, and macOS.... [...]
A whole different kettle of phish For the past decade, unidentified miscreants have been planting incriminating evidence on the devices of human-rights advocates, lawyers, and academics in India seemingly to get them arrested.... [...]
Excitement this month can be found in SAP code, with critical Log4j repairs and a CISA warning Patch Tuesday Microsoft for its February Patch Tuesday gave Windows admins just 51 fixes to apply, the smallest number of patches since the meager ration of 44 in August 2021.... [...]
Ilya Lichtenstein (yes really) and partner cuffed via blockchain records Updated Two New York-based "tech entrepreneurs" were arrested on Tuesday for allegedly conspiring to launder $4.5bn in stolen cryptocurrency, the US Department of Justice said, adding it's so far recovered $3.6bn in purloined digicash - based on current …
Failure to validate input in DeFi code let attacker mint money Wormhole, a protocol for connecting different blockchains, lost about $320m worth of Ether (ETH), thanks to poorly crafted code.... [...]
WhiteSource says it spotted 1,300 malicious JavaScript packages in 2021 alone Malware gets spotted in GitHub's npm registry every few months, elevating concerns about the software supply chain until attention gets diverted and worries recede until the next fire drill.... [...]
WhiteSource says it spotted 1,300 malicious JavaScript packages in 2021 alone Malware gets spotted in GitHub's npm registry every few months, elevating concerns about the software supply chain until attention gets diverted and worries recede until the next fire drill.... [...]
Cheesed-off customers have 'alleged enough facts at this stage' to allow legal battle to continue, says judge Intel will have to defend itself against claims that the semiconductor goliath knew its microprocessors were defective and failed to tell customers.... [...]
Relatively small number of certs issued using a verification method that doesn't comply with policy Let's Encrypt, a non-profit organization that helps people obtain free SSL/TLS certificates for websites, plans to revoke a non-trivial number of its certs on Friday because they were improperly issued.... [...]
What happens when argc is zero and a SUID program doesn't care? Let's find out! Linux vendors on Tuesday issued patches for a memory corruption vulnerability in a component called polkit that allows an unprivileged logged-in user to gain full root access on a system in its default configuration …
Disclosure of WebKit flaw appears to have prodded iBiz to undertake repairs Apple is preparing to repair a bug in its WebKit browser engineer that has been leaking data from its Safari 15 browser at least since the problem was reported last November.... [...]
Won't reveal net loss, says it stopped some withdrawals and has reimbursed those who had funds taken Crypto.com on Thursday said in a roundabout way that an unidentified person stole or attempted to steal as much as $34m in cryptocurrency from customer accounts.... [...]
Exploit, vulnerability discussion online can offer useful signals Organizations looking to minimize exposure to exploitable software should scan Twitter for mentions of security bugs as well as use the Common Vulnerability Scoring System or CVSS, Kenna Security argues.... [...]
Security biz PeckShield claims $15m in Ethereum taken Crypto.com, a Singapore-based cryptocurrency exchange, has denied reports that the firm lost nearly $15m in Ethereum in a possible network intrusion over the weekend.... [...]
Those critical AWS flaws that exposed data and broke tenant separation? All fixed! Two serious security vulnerabilities were recently found in AWS services, but because they were responsibly reported and the cloud biz responded quickly, no harm appears to have been done.... [...]
Bernalillo County's Metropolitan Detention Center still recovering from infection Bernalillo County, New Mexico, has been unable to comply with the settlement terms of a 27-year-old lawsuit over prison conditions because of a ransomware attack last week that saw prisoners back under manual control.... [...]
Nothing is certain except death, taxes, and programming errors Patch Tuesday The new year brings the same old chore of shoring up Microsoft software. For its first Patch Tuesday of 2022, Redmond has bestowed 96 new CVEs affecting its Windows products.... [...]
Departure comes as app courts controversy by integrating private cryptocurrency scheme Moxie Marlinspike, the creator of the Signal secure messaging app, on Monday announced his resignation as CEO of the company.... [...]
Boffins in Vienna devise way to make software prove how it behaves Folks at Technische Universität Wien in Austria have devised a formal security framework called WebSpec to analyze browser security.... [...]
Apply fixes responsibly in a timely manner or face the wrath of Lina Khan The US Federal Trade Commission on Tuesday warned companies that vulnerable Log4j software needs to be patched... or else.... [...]
Swiss cough up accused crim while Russia is 'deeply disappointed' The US Attorney's Office of Massachusetts on Monday announced the extradition of Vladislav Klyushin, a Russian business executive with ties to the Kremlin, on charges of hacking US computer networks and committing securities fraud by trading on undisclosed financial …
Swiss cough up accused crim while Russia is 'deeply disappointed' The US Attorney's Office of Massachusetts on Monday announced the extradition of Vladislav Klyushin, a Russian business executive with ties to the Kremlin, on charges of hacking US computer networks and committing securities fraud by trading on undisclosed financial …
Swiss cough up accused crim while Russia is 'deeply disappointed' The US Attorney's Office of Massachusetts on Monday announced the extradition of Vladislav Klyushin, a Russian business executive with ties to the Kremlin, on charges of hacking US computer networks and committing securities fraud by trading on undisclosed financial …
Report claims Huawei techs working for Chinese intelligence compromised Australian telco Suspicions about the integrity of Huawei products among US government officials can be attributed in part to a 2012 incident involving a Huawei software update that compromised the network of a major Australian telecom company with malicious code …
Federal agencies have a week to get their systems patched The US government's Cybersecurity and Infrastructure Security Agency (CISA) on Friday escalated its call to fix the Apache Log4j vulnerability with an emergency directive requiring federal agencies to take corrective action by 5 pm EST on December 23, 2021 …