Exploits gone wild: Hackers target critical image-processing bug
Vulnerability in ImageMagick allows attackers to execute malicious code. Continue reading Exploits gone wild: Hackers target critical image-processing bug
Author Archives: Dan Goodin
Garbage in, garbage out: Why Ars ignored this week’s massive password breach
When a script kiddie sells 272 million accounts for $1, be very, very skeptical. Continue reading Garbage in, garbage out: Why Ars ignored this week’s massive password breach
Critical Qualcomm security bug leaves many phones open to attack
Fix still isn’t available for most users, and many will probably never get it. Continue reading Critical Qualcomm security bug leaves many phones open to attack
Huge number of sites imperiled by critical image-processing vulnerability [Updated]
Attack code exploiting critical ImageMagick vulnerability expected within hours. Continue reading Huge number of sites imperiled by critical image-processing vulnerability [Updated]
Microsoft to retire support for SHA1 certificates in the next 4 months
The lock icon will be gone by summer; sites using SHA1 to be blocked come January. Continue reading Microsoft to retire support for SHA1 certificates in the next 4 months
Aging and bloated OpenSSL is purged of 2 high-severity bugs
Padding oracles and memory corruption threats caused by use of older schemes. Continue reading Aging and bloated OpenSSL is purged of 2 high-severity bugs
Samsung Smart Home flaws let hackers make keys to front door
Don’t rely on SmartThings for anything security related, researchers warn. Continue reading Samsung Smart Home flaws let hackers make keys to front door
Toymaker’s website pushes ransomware that holds visitors’ files hostage
Out-of-date Web app on Maisto.com causes site to attack its visitors. Continue reading Toymaker’s website pushes ransomware that holds visitors’ files hostage
Hacking Slack accounts: As easy as searching GitHub
Bot tokens leaked on public sites expose firms’ most sensitive business secrets. Continue reading Hacking Slack accounts: As easy as searching GitHub
7 million unsalted MD5 passwords leaked by Minecraft community Lifeboat
Worse still, service recommended “short, but difficult to guess passwords.” Continue reading 7 million unsalted MD5 passwords leaked by Minecraft community Lifeboat