Collaborate Disseminate
Researchers have discovered security holes in 5G, 4G and 3G telephony protocols, which can expose a user’s location. Continue reading Security weaknesses in 5G, 4G and 3G could expose users’ locations
How many user credentials have fallen into the hands of criminals during a decade of data breaches? Billions, according to two recent discoveries. Continue reading Credential dump contains another 2.2 billion pwned accounts
Google and Mozilla are tidying up security features and patching vulnerabilities in Chrome and Firefox for Mac, Windows, and Linux. Continue reading Update now! Chrome and Firefox patch security flaws
A researcher has discovered an alarming way that an attacker controlling a Microsoft Exchange mailbox account could potentially elevate their privileges to become a Domain Administrator. Continue reading Privilege escalation vulnerability uncovered in Microsoft Exchange
Dailymotion is resetting the account passwords of an unknown number of users after being hit by a “large-scale” credential stuffing attack. Continue reading Credential-stuffing attack prompts Dailymotion password reset
Of all the calamities that befall email users, few are more dreaded than the ‘reply all’ storm. Continue reading Even Microsoft can’t escape ‘reply all’ email storms
The US Department of Homeland Security (DHS) has issued an emergency directive tightening DNS security after a recent wave of domain hijacking attacks targeting government websites. Continue reading US gov declares emergency after wave of domain hijacking attacks
Apple has issued its January security updates fixing a list of mostly shared CVE flaws affecting iOS and macOS with a smattering for Safari, watchOS, tvOS, and iCloud for Windows. Continue reading Update now! Apple releases first 2019 iOS and macOS patches
Online gamblers lose their private data as yet another unsecured Elasticsearch database is discovered. Continue reading 100 million online bets exposed by leaky database
A researcher has found that websites can use some extensions to bypass security policies, execute code, and even install other extensions. Continue reading Rogue websites can turn vulnerable browser extensions into back doors