Mozilla Patches Pwn2Own Zero Day in Firefox
Mozilla patched a zero day uncovered at Pwn2Own in Firefox in 22 hours on Friday. Continue reading Mozilla Patches Pwn2Own Zero Day in Firefox
Author Archives: Chris Brook
Jon Oberheide on Perimeter Security
Mike Mimoso talks to Duo Security co-founder and CTO Jon Oberheide at RSA Conference about Google’s BeyondCorp security model, enforcing perimeter security, how endpoint security has evolved through the years, and the future of passwords. Continue reading Jon Oberheide on Perimeter Security
VM Escape Earns Hackers $105K at Pwn2Own
Hackers pulled off a VM escape and took down Adobe Flash, Microsoft Windows and Edge, Apple Safari and macOS, and Mozilla Firefox at Pwn2Own 2017. Continue reading VM Escape Earns Hackers $105K at Pwn2Own
Threatpost News Wrap, March 17, 2017
Mike Mimoso and Chris Brook discuss the news of the week, including Pwn2Own 2017, Microsoft’s silence around February’s Patch Tuesday, and a nasty SAP bug.
GitHub Code Execution Bug Fetches $18,000 Bounty
GitHub awarded $18,000 to a researcher after he came across a remote code execution bug in the company’s enterprise management console. Continue reading GitHub Code Execution Bug Fetches $18,000 Bounty
Hackers Take Down Reader, Safari, Edge, Ubuntu Linux at Pwn2Own 2017
On the first day of Pwn2Own 2017 hackers poked holes in Adobe Reader, Apple Safari, Microsoft Edge, and Ubuntu Linux. Continue reading Hackers Take Down Reader, Safari, Edge, Ubuntu Linux at Pwn2Own 2017
WhatsApp, Telegram Vulnerabilities Exposed Users to Account Takeover
WhatsApp and Telegram patched vulnerabilities in the last week that could have let an attacker take over a user’s account. Continue reading WhatsApp, Telegram Vulnerabilities Exposed Users to Account Takeover
Google Eliminates Android Adfraud Botnet Chamois
Google removed a family of malicious apps, Chamois, from its Play marketplace recently that were found manipulating ad traffic. Continue reading Google Eliminates Android Adfraud Botnet Chamois
Adobe Fixes Six Code Execution Bugs in Flash
Adobe fixed seven vulnerabilities, six that could lead to code execution, in Flash Player on Tuesday. Continue reading Adobe Fixes Six Code Execution Bugs in Flash
SAP Patches Critical HANA Vulnerability That Allowed Full Access
SAP patched a critical vulnerability in its cloud-based business platform HANA today that if exploited, could allow for a full system compromise, without authentication. Continue reading SAP Patches Critical HANA Vulnerability That Allowed Full Access