Microsoft Won’t Fix Security Bypass Vulnerability in Edge

Microsoft is opting to stand pat and not fix a content security bypass vulnerability in its Edge browser, something researchers warn could potentially lead to the disclosure of confidential information. Continue reading Microsoft Won’t Fix Security Bypass Vulnerability in Edge

Threatpost News Wrap, April 21, 2017

Mike Mimoso and Chris Brook discuss the news of the week, including last Friday’s ShadowBrokers dump – how Microsoft learned of the vulnerabilities, how they were patched by Oracle, along with Microsoft ditching passwords, and a new car dongle hack. Continue reading Threatpost News Wrap, April 21, 2017

Google Fixes Unicode Phishing Vulnerability in Chrome 58, Firefox Standing Pat

Google fixed a vulnerability that could’ve let an attacker carry out phishing attacks with Unicode domains in Chrome but Mozilla is holding off – for now. Continue reading Google Fixes Unicode Phishing Vulnerability in Chrome 58, Firefox Standing Pat

Google Fixes Unicode Phishing Vulnerability in Chrome 58, Firefox Standing Pat

Google fixed a vulnerability that could’ve let an attacker carry out phishing attacks with Unicode domains in Chrome but Mozilla is holding off – for now. Continue reading Google Fixes Unicode Phishing Vulnerability in Chrome 58, Firefox Standing Pat