Tag: Vulnerability
You are here: Home \ Vulnerability \ Page 6
19 October 2015 - 12:54, by , in News, No comments
Love it or hate it, if you’re an Anglophone, you’ve probably heard of it. The UK’s Daily Mail, or, more precisely, the web-based Mail Online, is said to be the world’s busiest English-language news site. Despite its British origins, and its UK flavour, 70% of its traffic is said to come from outside the British...
16 October 2015 - 12:58, by , in News, No comments
Get ready! We’re about to run the gauntlet of Mactivists, and we’d love you to join us. The story is a simple one: Apple released updates for iMovie and iWork this week (get ready for about 1GB of download in total), bumping up the middle digit of the products’ version numbers. Keynote on OS X,...
15 October 2015 - 9:26, by , in News, No comments
We already know that Android handset makers don’t always deliver security updates in a timely way – Google has only recently started issuing regular security updates for its own Nexus devices. But the number of unsecure Android devices out there is truly astonishing, according to research from the UK’s University of Cambridge – 87% of...
6 October 2015 - 22:14, by , in News, No comments
Remember Stagefright? It was a security hole, or more accurately a cluster of holes, in Android’s core media-handling library, known as libstagefright. The official name of the buggy library quickly morphed into the media-friendly moniker of the bugs themselves, Stagefright. In operating system terms, a “library” (usually known as a DLL, or dynamic link library,...
30 September 2015 - 22:48, by , in News, No comments
Apple just released iOS 9.0.2. This new version claims to close the well-publicised Lock screen hole that lets anyone view and edit your contacts, send text messages, and rummage through your photos – without entering your passcode. If you had an iOS 9 or 9.0.1 device with Siri accessible from your lock screen, you were vulnerable...
25 September 2015 - 12:55, by , in News, No comments
We’ve written several reports over the past year about a malware toolkit that uses Microsoft Word as its delivery vehicle. The idea is to package malware inside a Word document in such a way that the file looks innocent, with no macros (Word program code), no embedded programs, or other content that might make a...
23 September 2015 - 10:20, by , in News, No comments
A new security company known as Zerodium has come up with a 7-figure way to make a very loud splash as it enters the field. It’s got $1 million (about £651,000) in bug bounty money burning a hole in its pocket, and it’s looking to spend it on what’s thought to be the biggest bounty...
22 September 2015 - 12:48, by , in News, No comments
You’ve probably read all sorts of to-and-fro about Apple’s App Store this week. Until now, the App Store has been to the malware scene what the planet Earth was to Douglas Adams’s HHGttG: Mostly harmless. That changed a few days ago, when Palo Alto networks published a series of articles about malware that had shown...
18 September 2015 - 11:01, by , in News, No comments
Google pushed out its first-ever monthly security update for Android in August, fixing the Stagefright vulnerability that an attacker could use to own your device with a malicious MMS message. Nexus devices got their September security update last week, fixing another eight vulnerabilities, including one that could allow an attacker to bypass the lockscreen and access...
17 September 2015 - 11:58, by , in News, No comments
Apple iOS 9 is out. As usual when the left-most number changes, as here from version 8 to version 9, the download is bigger than your typical point release. For example, when we recently updated to 8.4.1, the download was about 50MB; this time, the over-the-air (OTA) update we were offered was 1.2GB. → Because...