Broken 2013 Java Patch Leads to Sandbox Bypass

A patch for a critical 2013 Java vulnerability is incomplete, and exposes Java servers and clients to a sandbox bypass, researchers at Security Explorations of Poland said. Continue reading Broken 2013 Java Patch Leads to Sandbox Bypass

Flash Player Update Patches 18 Remote Code Execution Flaws

Adobe today released a new version of Flash Player that patches 18 vulnerabilities, all of which can result in remote code execution attacks. Continue reading Flash Player Update Patches 18 Remote Code Execution Flaws

OTR Protocol Patched Against Remote Code Execution Flaw

Libotr, the Off-the-Record secure messaging protocol, has been patched against overflow vulnerabilities that could lead to remote code execution. Continue reading OTR Protocol Patched Against Remote Code Execution Flaw

Microsoft Patches Critical Vulnerabilities in its Browsers

Microsoft released 13 security bulletins, five of which it rated critical, including separate advisories patching two dozen flaws in IE and Microsoft Edge browsers. Continue reading Microsoft Patches Critical Vulnerabilities in its Browsers

Adobe Patches Reader and Acrobat, Teases Upcoming Flash Update

Adobe patched its Acrobat, Reader and Digital Editions products today, and said a Flash Player update is due in the “coming days.” Continue reading Adobe Patches Reader and Acrobat, Teases Upcoming Flash Update

Apple: Court Order Turns Back Clock on iPhone Security

Apple’s head of software engineering cautions that the FBI wants to turn back the clock on iPhone security, while the San Bernardino DA says a cyber pathogen may be dormant on shooter Syed Farook’s phone. Continue reading Apple: Court Order Turns Back Clock on iPhone Security

KeRanger OS X Ransomware Impact Likely Mitigated

Early detection of the KeRanger OS X ransomware and quick updates by Apple and the Transmission BitTorrent client installer likely will mitigate the malware’s impact. Continue reading KeRanger OS X Ransomware Impact Likely Mitigated

Apple Hackers, Crypto Experts Ask Courts to Vacate Order

An amicus brief filed on behalf of well known past and present Apple hackers asks the government to vacate its order asking Apple to unlock a terrorist’s phone. Continue reading Apple Hackers, Crypto Experts Ask Courts to Vacate Order