Atlassian announces 0-day hole in Confluence Server – update now!
Zero-day announced – here’s what you need to know Continue reading Atlassian announces 0-day hole in Confluence Server – update now!
Author Archives: Paul Ducklin
S3 Ep85: Now THAT’S what I call a Microsoft Office exploit! [Podcast]
Latest episode – listen now! Continue reading S3 Ep85: Now THAT’S what I call a Microsoft Office exploit! [Podcast]
Yet another zero-day (sort of) in Windows “search URL” handling
More trouble with special-purpose URLs on Windows. Continue reading Yet another zero-day (sort of) in Windows “search URL” handling
Firefox 101 is out, this time with no 0-day scares (but update anyway!)
After an intriguing month of Firefox releases, here’s one with a bit less drama, probably to the collective relief of Mozilla’s coders. Continue reading Firefox 101 is out, this time with no 0-day scares (but update anyway!)
Mysterious “Follina” zero-day hole in Office – here’s what to do!
News has emerged of a “feature” in Office that has been abused as a zero-day bug to run evil code. Turning off macros doesn’t help! Continue reading Mysterious “Follina” zero-day hole in Office – here’s what to do!
Beware the Smish! Home delivery scams with a professional feel…
Home delivery scams are getting leaner, and meaner, and more likely to “look about right”. Here’s an example to show you what we mean… Continue reading Beware the Smish! Home delivery scams with a professional feel…
S3 Ep84: Government demand, Mozilla velocity, and Clearview fine [Podcast]
Latest episode – listen now! Continue reading S3 Ep84: Government demand, Mozilla velocity, and Clearview fine [Podcast]
Who’s watching your webcam? The Screencastify Chrome extension story…
When you really need to make exceptions in cybersecurity, specify them as explicitly as you can. Continue reading Who’s watching your webcam? The Screencastify Chrome extension story…
Poisoned Python and PHP packages purloin passwords for AWS access
More supply chain trouble – this time with clear examples so you can learn how to spot this stuff yourself. Continue reading Poisoned Python and PHP packages purloin passwords for AWS access
Clearview AI face-matching service fined a lot less than expected
The fine has finally gone through… but it’s less than 45% of what was originally proposed. Continue reading Clearview AI face-matching service fined a lot less than expected