NSA, Google, & Microsoft – Application Security Weekly #05

In the news, NSA Exploits Ported to Work on All Windows Versions Released Since Windows 2000, beware the looming Google Chrome HTTPS certificate apocalypse, Microsoft open sources a new Kubernetes GPU and device scheduling extension, and more on this e… Continue reading NSA, Google, & Microsoft – Application Security Weekly #05

Microsoft Programming Error is Behind Dangerous Kernel Bug, Researchers Claim

Researchers say a 18-year-old programming error by Microsoft is creating a kernel bug that can be abused by an attacker. Continue reading Microsoft Programming Error is Behind Dangerous Kernel Bug, Researchers Claim

SCARY: “Atom Bomb” Windows Security Hole said to be Unfixable

Atom Bombing Windows security flaw

Windows has an unfixable security flaw. That’s the frightening conclusion of this researcher, who says he can inject code—at will—into browsers and other Windows apps. It affects all versions of Windows released in the past 16 years, he says. And it can’t be patched, without breaking legitimate desktop apps. It could be bad for containerized server workloads, too…

The post SCARY: “Atom Bomb” Windows Security Hole said to be Unfixable appeared first on Petri.

Continue reading SCARY: “Atom Bomb” Windows Security Hole said to be Unfixable