Android rooting bug opens Nexus phones to “permanent device compromise”
Millions of other phones affected because Android never received 2014 Linux patch. Continue reading Android rooting bug opens Nexus phones to “permanent device compromise”
Author Archives: Dan Goodin
Psst: Here’s Uber’s most vulnerable code just waiting to be hacked
Company’s just-unveiled bug bounty program aims to outdo industry norms. Continue reading Psst: Here’s Uber’s most vulnerable code just waiting to be hacked
Crypto vulnerability lets attackers decrypt iMessage photo, article warns
Bug can be exploited when iCloud photo is sent over iMessage, Washington Post reports. Continue reading Crypto vulnerability lets attackers decrypt iMessage photo, article warns
275 million Android phones imperiled by new code-execution exploit
Unpatched “Stagefright” vulnerability gives attackers a road map to hijack phones. Continue reading 275 million Android phones imperiled by new code-execution exploit
Once thought safe, DDR4 memory shown to be vulnerable to “Rowhammer”
New research finds “bitflipping” attacks may pose more risk than many admit. Continue reading Once thought safe, DDR4 memory shown to be vulnerable to “Rowhammer”
To bypass code-signing checks, malware gang steals lots of certificates
Legitimate code-signing certificates provide secret cover for attack groups. Continue reading To bypass code-signing checks, malware gang steals lots of certificates
Big-name sites hit by rash of malicious ads spreading crypto ransomware [Updated]
New malvertising campaign may have exposed tens of thousands in the past 24 hours. Continue reading Big-name sites hit by rash of malicious ads spreading crypto ransomware [Updated]
John Oliver explains why iPhone encryption debate is no joking matter
Comedian dissects FBI technical and legal fallacies without lionizing Apple. Continue reading John Oliver explains why iPhone encryption debate is no joking matter
Botched Java patch leaves millions vulnerable to 30-month-old attack
Oracle said the flaw was fixed. Newly released exploit code shows otherwise. Continue reading Botched Java patch leaves millions vulnerable to 30-month-old attack
Adobe issues emergency patch for actively exploited code-execution bug
Critical bug was used to take control of vulnerable computers. Continue reading Adobe issues emergency patch for actively exploited code-execution bug