This Week in Security: SWAPGS, Malicious Shaders, More iOS Woes, and WPA3

I’m sure you’ve heard of Spectre, which was the first of many speculative execution vulnerabilities found in modern processors. A new one just popped up this week. At Blackhat on Tuesday, CVE-2019-1125 was announced by Bitdefender as SWAPGS.

SWAPGS is an x86_64 instruction that is intended for use in context …read more

Continue reading This Week in Security: SWAPGS, Malicious Shaders, More iOS Woes, and WPA3

This Week in Security: Ransomware Keys, iOS Woes, and more

Remember the end of GandCrab we talked about a couple weeks back? A new wrinkle to this story is the news that a coalition of law enforcement agencies and security researchers have released a decrypter and the master decryption keys for that ransomware. It’s theorized that researchers were able to …read more

Continue reading This Week in Security: Ransomware Keys, iOS Woes, and more

This Week in Security: Facebook Hacked your Email, Cyber on the Power Grid, and a Nasty Zero-day

Ah, Facebook. Only you could mess up email verification this badly, and still get a million people to hand over their email address passwords. Yes, you read that right, Facebook’s email verification scheme was to ask users for their email address and email account password. During the verification, Facebook automatically …read more

Continue reading This Week in Security: Facebook Hacked your Email, Cyber on the Power Grid, and a Nasty Zero-day

Shadowhammer, WPA3, and Alexa is Listening: This Week in Computer Security

Let’s get caught up on computer security news! The big news is Shadowhammer — The Asus Live Update Utility prompted users to download an update that lacked any description or changelog. People thought it was odd, but the update was properly signed by Asus, and antivirus scans reported it as …read more

Continue reading Shadowhammer, WPA3, and Alexa is Listening: This Week in Computer Security