Netflix researcher spots TCP SACK flaws in Linux and FreeBSD

Three vulnerabilities in the FreeBSD and Linux kernels could allow attackers to induce a denial-of-service by clogging networking I/O. Continue reading Netflix researcher spots TCP SACK flaws in Linux and FreeBSD

Critical flaw found in Evernote Web Clipper for Chrome

Anyone using it in its unpatched state is at risk not only of a compromise of their Evernote account but, potentially, of third-party accounts too. Continue reading Critical flaw found in Evernote Web Clipper for Chrome

Microsoft’s battle with SandboxEscaper zero days turns into grim Groundhog Day

Why is SandboxEscaper releasing vulnerabilities in such an irresponsible way? It matters not – Microsoft must patch what’s in front of it whatever the backstory. Continue reading Microsoft’s battle with SandboxEscaper zero days turns into grim Groundhog Day