security
Better patch Windows Server ASAP as remotely exploitable vulnerability found
by Surur
2 weeks
IT staff are not often the fastest to install patches, lest they cause more issues than they solve, but a new vulnerability in all versions of Windows 10 and Windows Server suggests they may need to rethink that policy. The CERT C...
Latest Windows 10 Zero-day Privilege Escalation bug would allow attacker to overwrite arbitrary files with dat...
by Surur
3 weeks
A hacker has found another way to break the Windows 10 app security model. SandboxEscaper, who has posted 3 other zero-day bugs in Windows in the last 4 months, have published another which uses the Windows Error Reporting syste...
Malware-infested games downloaded more than 500,000 times on Google Play Store
by Surur
2 months
A security researcher has discovered that a hacker group has managed to smuggle 13 “games” into the Google Play Store which have collectively been installed more than 560,000 times. The malware, which poses as games, b...
Security Researcher to release Edge browser Zero-day Remote Code Execution exploit soon
by Surur
3 months
Around one in 20 desktop web browsers need to start worrying, as security researcher Yushi Liang is preparing to release a Zero-Day exploit for the Edge browser which allows Remote Code Execution, including escaping the Edge sand...
Microsoft finds way to protect PCs from Windows Defender Exploits
by Surur
3 months
The smartest attacks do not merely overcome defences, but actually turn your defenders against you. Such is the case with HIV for example, which infects your immune cells as a way to enter the body. It turns out there is a close ...
Microsoft patches zero-day Windows 10 exploit being used for targeted attacks
by Surur
3 months
In the latest Cumulative Update, Microsoft has patched a vulnerability in Windows 10 discovered and reported by Kaspersky in August 2018 which was being used in very targetted attacks in the middle east. Microsoft writes: CVE-201...
Bloomberg responds to Apple’s denials with fresh evidence of pervasive hardware hacking
by Surur
3 months
Bloomberg has recently been embroiled in controversy after they accused industry supplier Supermicro of supplying motherboards infected with compromised chips which could be used to steal data from servers from companies such as A...
Last week’s Windows Zero-Day vulnerability already being exploited in the wild
by Surur
5 months
We wrote last week of a frustrated security researcher revealing a new zero-day bug for fully-patched Windows 10 PCs which would allow any software running on your PC to gain system-level privileges. The bug is a local exploit (i...
New Windows Zero-Day vulnerability disclosed on Twitter
by Surur
5 months
A frustrated security researcher has revealed a new zero-day bug for fully-patched Windows 10 PCs which would allow any software running on your PC to gain system-level privileges. In the now deleted tweet he said: Here is the alp...