Zlib data compressor fixes 17-year-old security bug – patch, errrm, now
This code is venerable! Surely all the bugs must be out by now? Continue reading Zlib data compressor fixes 17-year-old security bug – patch, errrm, now
Author Archives: Paul Ducklin
Google Chrome patches mysterious new zero-day bug – update now
CVE-2022-1096 – another mystery in-the-wild 0-day in Chrome… check your version now! Continue reading Google Chrome patches mysterious new zero-day bug – update now
S3 Ep75: Okta hack, CryptoRom, OpenSSL, and CafePress [Podcast]
Latest episode – listen now! Continue reading S3 Ep75: Okta hack, CryptoRom, OpenSSL, and CafePress [Podcast]
Serious Security: DEADBOLT – the ransomware that goes straight for your backups
Some tips on how to keep your network safe – even (or perhaps especially!) if you think you’re safe already. Continue reading Serious Security: DEADBOLT – the ransomware that goes straight for your backups
Web vendor CafePress fined $500,000 for giving cybersecurity a low value
Just because you’re the victim of a cybercrime doesn’t let you off your cybersecurity obligations Continue reading Web vendor CafePress fined $500,000 for giving cybersecurity a low value
OpenSSL patches infinite-loop DoS bug in certificate verification
When it comes to writing loops in your code… never sit on the fence! Continue reading OpenSSL patches infinite-loop DoS bug in certificate verification
S3 Ep74: Cybercrime busts, Apple patches, Pi Day, and disconnect effects [Podcast]
Latest episode – listen now! Continue reading S3 Ep74: Cybercrime busts, Apple patches, Pi Day, and disconnect effects [Podcast]
Beware bogus Betas – cryptocoin scammers abuse Apple’s TestFlight system
“Install this moneymaking app” – this one is so special that it isn’t available on Google Play or the App Store! Continue reading Beware bogus Betas – cryptocoin scammers abuse Apple’s TestFlight system
CISA warning: “Russian actors bypassed 2FA” – what happened and how to avoid it
Don’t leave old accounts lying around where someone sketchy could reactivate them. Continue reading CISA warning: “Russian actors bypassed 2FA” – what happened and how to avoid it
Apple patches 87 security holes – from iPhones and Macs to Windows
Lots of fixes, with data leakage flaws and code execution bugs patched on iPhones, Macs and even Windows. Continue reading Apple patches 87 security holes – from iPhones and Macs to Windows