Mozilla rushes out patch for Firefox zero‑day
The US cybersecurity agency warns that the critical vulnerability could allow attackers to take control of people’s computers The post Mozilla rushes […]
REvil ransomware exploiting VPN flaws made public last April
Researchers report flaws, vendors issue patches, organisations apply them – and everyone lives happily ever after. Right? Wrong! ——– Free High Security […]
YouTube to treat all kid-aimed videos like they’re COPPA-liable
The FTC can fine content creators up to $42,530 per violation – even though they don’t collect, receive, nor have access to […]
US warns of Iranian cyber threat
The DHS has issued three warnings in the last few days encouraging people to be on alert for physical and cyber attacks […]
Facebook bans deepfakes, but not cheapfakes or shallowfakes
Quick-n-sleazy edits are still OK, such as the 75% slowdown that made Nancy Pelosi slur or the edit that turned Joe Biden […]
New SHA-1 Attack
There’s a new, practical, collision attack against SHA-1: In this paper, we report the first practical implementation of this attack, and its […]
Las Vegas Suffers Cyberattack on First Day of CES
The attack, still under investigation, hit early in the morning of Jan. 7. ——– Free High Security Email from Sigma
Developers Still Don’t Properly Handle Sensitive Data
The top classes of vulnerabilities for 2019 indicate that developers still don’t correctly sanitize inputs, nor protect passwords and keys as they […]
Google’s Project Zero Policy Change Mandates 90-Day Disclosure
The updated disclosure policy aims to achieve more thorough and improved patch development, Google reports. ——– Free High Security Email from Sigma
TikTok Bugs Put Users’ Videos, Personal Data At Risk
Researchers found it was possible to spoof SMS messages from TikTok and exploit an API flaw that could grant access to users’ […]