Collaborate Disseminate
Bugs in the widespread graphics system Ghostscript could be exploited remotely by crooks – so here’s how to keep attackers at bay. Continue reading How an uploaded image could take over your website, and how to stop it
Mozilla has wiped 23 extensions from its directory of Firefox browser add-ons after finding what it says were inappropriate functions in the code. Continue reading Firefox axes add-ons, developer pushes back
In this story, three webcam bugs that weren’t critical one-by-one could be combined into an exploit giving total device takeover. Continue reading Serious Security: How three minor bugs make one major exploit
Remote code execution vulnerabilities dominate this month’s critical Android patches. Continue reading Google Patches 11 Critical Android Bugs in June Update
Here’s the latest Naked Security podcast – enjoy! Continue reading How to find lost USB drives (even if you don’t want to) [PODCAST]
A command injection bug in Red Hat’s DHCP client could allow an attacker to run any command on your computer. As root. Continue reading RedHat admins, patch now – don’t let your servers get pwned!
Remediation TL;DR If you’re a concerned Signal user please update to the latest version of Signal Desktop (fixed in version v1.11.0) which addresses all of these issues. Note that the mobile apps for Signal were not affected by this issue. Backgr… Continue reading “I too like to live dangerously”, Accidentally Finding RCE in Signal Desktop via HTML Injection in Quoted Replies
An anonymous researcher recently disclosed two vulnerabilities in several older models of Dasan-made GPON routers. Continue reading Remote code execution bug found in GPON routers, but how bad is it really?
Uninitialised variables and no Address Space Layout Randomisation led to an exploitable vulnerability… Continue reading Critical bug in 7-Zip – make sure you’re up to date!
How the graphics chip in your mobile phone could allow crooks to deliver malware via your browser – no app download required. Continue reading Serious Security: The GLitch “row hammering” attack