Belkin Wemo Smart Plug V2 – the buffer overflow that won’t be patched
Yes, it’s a buffer overflow bug. No, it’s not going get fixed. Continue reading Belkin Wemo Smart Plug V2 – the buffer overflow that won’t be patched
Author Archives: Paul Ducklin
Zut alors! Raclage crapuleux! Clearview AI in 20% more trouble in France
We asked you once, we told you twice, now we’re ordering you for the third time… Continue reading Zut alors! Raclage crapuleux! Clearview AI in 20% more trouble in France
S3 Ep134: It’s a PRIVATE key – the hint is in the name!
Latest episode – listen now! (Full transcript inside.) Continue reading S3 Ep134: It’s a PRIVATE key – the hint is in the name!
Bootkit zero-day fix – is this Microsoft’s most cautious patch ever?
When blocking buggy bootup modules, you have to be really careful not to lock your keys inside the car… Continue reading Bootkit zero-day fix – is this Microsoft’s most cautious patch ever?
Low-level motherboard security keys leaked in MSI breach, claim researchers
What can you do if someone steals your keys but you can’t change the lock? We explain the dilemma in plain English. Continue reading Low-level motherboard security keys leaked in MSI breach, claim researchers
PHP Packagist supply chain poisoned by hacker “looking for a job”
I pwned you! Gizza job! You know it makes sense! Continue reading PHP Packagist supply chain poisoned by hacker “looking for a job”
World Password Day: 2 + 2 = 4
We’ve kept it short and simple, with no sermons, no judgmentalism, no tubthumping… and no BUY NOW buttons. Have a nice day! Continue reading World Password Day: 2 + 2 = 4
Tracked by hidden tags? Apple and Google unite to propose safety and security standards…
To bleat, or not to bleat, that is the question. Continue reading Tracked by hidden tags? Apple and Google unite to propose safety and security standards…
Apple delivers first-ever Rapid Security Response “cyberattack” patch – leaves some users confused
Just when we’d got used to three-numbered versions, such as “13.3.1”, here comes an update suffix, bringing you “13.3.1 (a)”… Continue reading Apple delivers first-ever Rapid Security Response “cyberattack” patch – leaves some users confused
Mac malware-for-hire steals passwords and cryptocoins, sends “crime logs” via Telegram
These malware peddlers are specifically going after Mac users. The hint’s in the name: “Atomic macOS Stealer”, or AMOS for short. Continue reading Mac malware-for-hire steals passwords and cryptocoins, sends “crime logs” via Telegram