132 Google Play apps tried to infect Android users with… Windows malware
Researchers suspect developers didn’t intentionally spawn the malicious apps. Continue reading 132 Google Play apps tried to infect Android users with… Windows malware
Author Archives: Dan Goodin
Researchers find “severe” flaw in WordPress plugin with 1 million installs
If you use NextGEN Gallery, now would be a good time to update. Continue reading Researchers find “severe” flaw in WordPress plugin with 1 million installs
Creepy IoT teddy bear leaks >2 million parents’ and kids’ voice messages
Publicly accessible database wasn’t even protected by a password. Continue reading Creepy IoT teddy bear leaks >2 million parents’ and kids’ voice messages
Google reports “high-severity” bug in Edge/IE, no patch available
String of unpatched security flaws comes after February Patch Tuesday was canceled. Continue reading Google reports “high-severity” bug in Edge/IE, no patch available
Watershed SHA1 collision just broke the WebKit repository, others may follow
“Please exercise care” with colliding PDFs, researchers advise software developers. Continue reading Watershed SHA1 collision just broke the WebKit repository, others may follow
Serious Cloudflare bug exposed a potpourri of secret customer data
Service used by 5.5 million websites may have leaked passwords and authentication tokens. Continue reading Serious Cloudflare bug exposed a potpourri of secret customer data
At death’s door for years, widely used SHA1 function is now dead
Algorithm underpinning Internet security falls to first-known collision attack. Continue reading At death’s door for years, widely used SHA1 function is now dead
Hacks all the time. Engineers recently found Yahoo systems remained compromised
Company knocks $350 million off its purchase price. Continue reading Hacks all the time. Engineers recently found Yahoo systems remained compromised
Hackers who took control of PC microphones siphon >600 GB from 70 targets
Critical infrastructure, media, and scientists targeted by suspected nation-state. Continue reading Hackers who took control of PC microphones siphon >600 GB from 70 targets
New ASLR-busting JavaScript is about to make drive-by exploits much nastier
A property found in virtually all modern CPUs neuters decade-old security protection. Continue reading New ASLR-busting JavaScript is about to make drive-by exploits much nastier