BlackNurse revisited: what you need to know
We’ve had a steady stream of questions about “BlackNurse”, so we thought we’d answer them all in one place. Here you are. Continue reading BlackNurse revisited: what you need to know
Author Archives: Paul Ducklin
Get root on Linux: learn the secret password
Spoiler alert: the secret password is [none], but you have to enter it over and over again. Continue reading Get root on Linux: learn the secret password
Wi-Fi shadows cast by your fingers could leak your password
Researchers claim that with a modified Wi-Fi access point they can use the radio interference of your fingers to guess your password. Continue reading Wi-Fi shadows cast by your fingers could leak your password
Anatomy of a Chrome for Android bug: the mixed-up world of mobile browsers
Security researchers at Kaspersky recently wrote about various Android attacks featuring malware known as Svpeng. Svpeng is a whole family of data-stealing and banking-related threats, so this is more than just what Google might glibly try to label Potentially Harmful Software: it’s malware, and you definitely don’t want it near your phone. (Sophos products block […]
Continue reading Anatomy of a Chrome for Android bug: the mixed-up world of mobile browsers
iPhone autodial bug parties like it’s 2008
A researcher who found an autodial bug in mobile Safari more than 8 years ago has found it’s still there in another part of iOS. Continue reading iPhone autodial bug parties like it’s 2008
November Patch Tuesday fixes controversial Windows 0-day hole
This month: 14 bulletins, seven remote code execution holes closed, and one controversial ‘promote yourself to administrator’ zero-day bug fixed. Continue reading November Patch Tuesday fixes controversial Windows 0-day hole
Security All Saints: security is for life, not just for Halloween
The day after Halloween is All Saints’ Day – are you ready to try out being a Security Saint? Continue reading Security All Saints: security is for life, not just for Halloween
Halloween Special: three zombie security myths that just won’t die
Paul Ducklin returns alive from an undercover investigative assignment into undead Zombie Security Myths…and here they are! Continue reading Halloween Special: three zombie security myths that just won’t die
PayPal 2FA bypass – how did *that* get past testing?
Want to make sure you get no questions wrong when you take a test? Easy! Set a test with no questions. Continue reading PayPal 2FA bypass – how did *that* get past testing?
DirtyCOW Linux hole works on Android too – “root at will”
Turns out that the DirtyCOW Linux exploit can be used on Android, too. Rooters will be delighted, sysadmins might not be. Continue reading DirtyCOW Linux hole works on Android too – “root at will”