Google Retreats on Some Allo Privacy Promises
Google released its smart messaging app called Allo, but a decision to log chats indefinitely has privacy advocates worried. Continue reading Google Retreats on Some Allo Privacy Promises
Author Archives: Michael Mimoso
Mozilla Patches Certificate Pinning Vulnerability in Firefox
A remote code execution in Firefox caused by the expiration of certificate pins was patched by Mozilla in Firefox 49 and Firefox ESR 45.4. Continue reading Mozilla Patches Certificate Pinning Vulnerability in Firefox
Mamba Ransomware Encrypts Hard Drives Rather Than Files
A new ransomware strain called Mamba opts to encrypts hard drives rather than individual files and folders stored on the local disk. Continue reading Mamba Ransomware Encrypts Hard Drives Rather Than Files
Experts Want Transparency From Government’s Vulnerabilities Equities Process
Security and policy experts make another call for additional transparency around the government’s Vulnerabilities Equities Process and the zero days it has in its possession. Continue reading Experts Want Transparency From Government’s Vulnerabilities Equities Process
Mozilla Patching Firefox Certificate Pinning Vulnerability
Mozilla is expected tomorrow to patch a critical certificate pinning vulnerability in Firefox’s automated update process for extensions. Continue reading Mozilla Patching Firefox Certificate Pinning Vulnerability
Cisco Warns of IOS Flaw Vulnerable to ShadowBrokers Attack
Cisco has issued an advisory warning its customers that products running its IOS software are vulnerable to attacks disclosed by the ShadowBrokers Continue reading Cisco Warns of IOS Flaw Vulnerable to ShadowBrokers Attack
Researcher Proves Viability of NAND Mirroring to Bypass iPhone Passcode Restrictions
A researcher from Cambridge University successfully bypassed an iPhone 5c’s passcode restrictions using NAND mirroring. Continue reading Researcher Proves Viability of NAND Mirroring to Bypass iPhone Passcode Restrictions
Microsoft Shuts Down Zero Day Used in AdGholas Malvertising Campaigns
Microsoft this week patched a zero-day vulnerability in the Internet Explorer and Edge browsers being used in the AdGholas malvertising campaign. Continue reading Microsoft Shuts Down Zero Day Used in AdGholas Malvertising Campaigns
Microsoft Shuts Down Zero Day Used in AdGholas Malvertising Campaigns
Microsoft this week patched a zero-day vulnerability in the Internet Explorer and Edge browsers being used in the AdGholas malvertising campaign. Continue reading Microsoft Shuts Down Zero Day Used in AdGholas Malvertising Campaigns
Google Project Zero Prize Pays $200,000 for Critical Vulnerability Chains
Google Project Zero announced a six-month Android bug bounty program that requires researchers to file bugs as they find them, rather than hoard the whole chain. Continue reading Google Project Zero Prize Pays $200,000 for Critical Vulnerability Chains