More stories

  • in

    iOS 17.5.1 patches cringey bug that was resurrecting old, deleted photos

    d3sign/Getty Images Last week, users over on Reddit began reporting a peculiar issue with iPhones and iPads that have been updated to iOS 17.5/iPadOS 17.5: Devices were mysteriously resurrecting old photos that had previously been deleted. And this glitch could potentially lead to embarrassing situations, as personal and sensitive images users believed were gone for […] More

  • in

    Are you being tracked? What new privacy features from Apple and Google can (and can’t) tell you

    BRENDAN SMIALOWSKI/AFP via Getty Images Earlier this month, Apple and Google rolled out enhanced privacy features that monitor Bluetooth-enabled tracking devices to iOS and Android users. These features will alert users if someone else’s AirTag, Find My Device network-compatible tracker tag, or other industry specification-compatible Bluetooth tracker is moving with them.  Also: The best AirTag accessories you can buy But […] More

  • in

    Are all Linux vendor kernels insecure? A new study says yes, but there’s a fix

    Paul Souders/Getty Images In a new white paper, Vendor Kernels, Bugs and Stability, the infrastructure software and Rocky Linux company CIQ presents a compelling argument that Linux vendor kernels are plagued with security vulnerabilities due to the flawed engineering processes that backport fixes.  Also: The top three Linux 6.9 kernel upgrades While this may shock […] More

  • in

    Google patches another zero-day exploit in Chrome – and this one affects Edge too

    Kyle Kucharski/ZDNETIf you’re using Google’s Chrome browser, it’s time to update it — and fast.Google confirmed this week that it has released Chrome 125 for Windows, Mac, and Linux. The update includes a range of patches to security flaws, including a zero-day exploit called CVE-2024-4947. Zero-day exploits are vulnerabilities in software that malicious actors may know about and can easily target users because the software maker has yet to patch the flaw. And if that sounds familiar, it’s because Google released another patch last week to fix another zero-day exploit.Also: Meet Hackbat: An open-source, more powerful Flipper Zero alternativeCVE-2024-4947 refers to “Type Confusion in V8” Javascript. The flaw, which was discovered by security researchers Vasily Berdnikov and Boris Larin at security company Kaspersky, could enable hackers to target individual users and cause their browsers to crash. It could also be used to execute code that could put their data at risk.For its part, Google shared a few precious details about the flaw, saying instead that “access to bug details and links may be kept restricted until a majority of users are updated with a fix.” The company added that it’s “aware that an exploit for CVE-2024-4947 exists in the wild,” but it stopped short of providing details. More

  • in

    Google unveils new Android 15 security updates: What you need to know

    Kerry Wan/ZDNETGoogle’s Android 15 is launching later this year. But Google is already talking about some of the important security updates users can expect when it’s made available.The tech giant said on Wednesday that it’s planning a host of security updates for Android 15 and its Google Play marketplace that could ultimately improve user security. In a blog post, Dave Kleidermacher, vice president of engineering, Android security, and privacy, said his company is committed to ensuring “user safety is a top priority.” The updates unveiled in his blog post center mainly on “fraud and scam protection features” that will close some of the loopholes malicious actors use to target Android users.Also: 5 exciting Android features Google just announced at I/O 2024That said, the updates will be coming to Android 15, an operating system that Google is currently testing in beta and won’t be made available to its entire user base until later this year. So, while the updates will undoubtedly help some users, their effect won’t be felt until Android 15 launches sometime this fall. More

  • in

    Hacker claims to have stolen Dell customer data – here’s how to protect yourself

    JuSun/Getty Images A hacker who calls himself Menelik has taken credit for not one but two recent data breaches against PC maker Dell. In the first attack as reported by TechCrunch, he claims to have accessed a Dell online portal through which he stole customer names, physical addresses, and order information. Staging a second attack […] More

  • in

    Lawmakers’ Section 230 ultimatum to Big Tech: Work together to make the internet safer, or else

    Richard Sharrocks/Getty Images For years, some of the world’s biggest tech companies have been shielded from lawsuits by Section 230 of the Communications Decency Act. But newly proposed legislation could change that — and have major implications for tech companies themselves. House Energy and Commerce Committee Chair Cathy McMorris Rodgers (R-WA) and Ranking Member Frank […] More