Yes, folks, you read that correctly – the new TPM 2.0 (Trusted Platform Module) security mechanism that Microsoft insisted everyone must have to enhance security includes a serious security flaw. This recently discovered vulnerability in TPM 2.0 could allow hackers to execute malicious code, which […]
TPM Vulnerability Discovered – Affects Billions! Read More »
Google announces critical Chrome vulnerability — you need to update Chrome ASAP. Google has confirmed the news that its Chrome browser has fallen victim to the sixteenth zero-day attack of the year. Zero-day vulnerabilities are when hackers discover a security flaw before a patch has
Chrome Critical Vulnerability – Update NOW Read More »
Microsoft has released an out-of-cycle security update to patch a serious vulnerability. The security flaw, known as “PrintNightmare”, affects the Windows Print Spooler service. This vulnerability was first brought to notice via a Tweet in late May from researchers at cybersecurity company Sangfor who later
Urgent Advisory: Update Your Windows NOW! Read More »
An active zero-day exploit has been discovered affecting both the Firefox and Tor browsers – the latter because it is based on the former (specifically, on the Firefox ESR browser). At this point it’s not known who first started wielding the exploit, however, it is
Update Your Firefox and/or Tor Browser NOW Read More »
The net is abuzz with news of a vulnerability uncovered in the popular WinRar software, potentially affecting over 500 million users worldwide. The vulnerability, which makes it possible for malicious code to be executed when opening self-extracting (SFX) ZIP or RAR files, was recently discovered
WinRar Vulnerability Discovered, Should You Be Concerned Read More »
Still not talking about coffee Oracle’s Java and Adobe’s Flash have led a long and fruitful life having served a valuable purpose to one and all. However, now is the time for them to retire gracefully, move to a nice quite village, let the young
Junk Your Java and Flush Your Flash Read More »
Secunia has recently released its Vulnerability Review 2015 which reports that more vulnerabilities were discovered in Chrome during 2014 than any other piece of core internet software – almost double that of the next nearest contender Internet Explorer. Actual results concluded by Secunia are: Chrome
The Most Vulnerable Browser Prize Goes to – Chrome! Read More »
There’s been a lot written recently regarding a vulnerability known as “FREAK”, much of it involving unnecessarily scary rhetoric. The truth of the matter is, for Windows users anyway, the only real risk is (or was) pretty much restricted to Internet Explorer. Both Firefox and
The ‘FREAK’ Vulnerability – Internet Explorer Users Note! Read More »
Microsoft has issued a Security Advisory warning Internet Explorer users of a targeted attack which exploits a previously unknown flaw to allow remote code execution. According to FireEye, the security firm credited with discovering the attack, all versions of Internet Explorer (v6 – v11) are
Internet Explorer Users Warned: New Zero-Day Exploit Discovered Read More »
It is being universally described as “catastrophic” and “the biggest security threat the internet has ever seen”… it is called Heartbleed. Heartbleed – What is it? “Heartbleed” is the name given to a bug recently discovered in a component of the widely utilized OpenSSL open
Heartbleed: The Biggest Threat to Online Security Ever! Read More »
A vulnerability has been discovered in the popular and widely utilized Foxit PDF Reader software; specifically through its browser plug-in which is installed by default in Firefox, Chrome, Opera and Safari. Ironically, Foxit has always billed itself as the “secure” PDF reader. The vulnerability has
Foxit Reader critical security flaw discovered! Read More »
Everyone must surely be aware by now of the vulnerabilities inherent in the Java platform. News of the latest Java vulnerability has been doing the rounds… yet again – http://www.us-cert.gov/cas/techalerts/TA13-010A.html The previous serious incidence was brought to light only last August, as reported by DCT
Oracle issues update to patch latest Java vulnerability Read More »
Internet Explorer 0-day vulnerability discovered This is big, folks! Earlier this week security researcher Eric Romang was studying the Chinese web servers used in the recent Java 0-day exploits (See my previous Junk You Java article) when he discovered they are exploiting a previously unknown
Attention Internet Explorer users! Read More »
Attackers have seized upon a security hole in Oracle’s ubiquitous Java software to break into vulnerable systems. Within days of its discovery it appears that the new zero day flaw could soon become widespread. The original report from FireEye indicates that initial attacks exploiting this
Java zero-day exploit expected to spread! Read More »
