Subterms
Image: Unc0ver Team A team of hackers, security researchers, and reverse engineers have released today a new jailbreak package for iOS devices. By default, Apple does not allow users to have full control over their iPhones and other iOS devices, citing security reasons. Jailbreaks are a type of custom software that works by exploiting bugs […] More
Image: Google Roughly 70% of all serious security bugs in the Chrome codebase are memory management and safety bugs, Google engineers said this week. Half of the 70% are use-after-free vulnerabilities, a type of security issue that arises from incorrect management of memory pointers (addresses), leaving doors open for attackers to attack Chrome’s inner components. […] More
Image: Mathway A hacker has breached Mathway, a popular math solving application, from where they have stolen more than 25 million emails and passwords, ZDNet has learned. The hack is the latest in a long line of security breaches carried out by a hacker going by the name of ShinyHunters, the threat actor also responsible […] More
Image: ZDNet // Catalin Cimpanu Security researchers say they’ve spotted a new version of the Sarwent malware that opens RDP (Remote Desktop Protocol) ports on infected computers so hackers could gain hands-on access to infected hosts. Researchers from SentinelOne, who spotted this new version, believe the Sarwent operators are most likely preparing to sell access […] More
Microsoft has been rushing out new Microsoft Teams features to help 75 million people each day teleworking during the coronavirus pandemic. But one part of the Microsoft Teams portfolio that hasn’t benefited from social distancing is Microsoft Teams Rooms, its conference-room product. Conference-room products might never be needed again at some companies, like Twitter and Square, […] More
Microsoft has explained why it’s pursuing ‘safe systems programming’ through efforts like its experimental Rust-inspired Project Verona language and its exploration of the Rust programming language for Windows code written in C++. The short answer is that Microsoft is trying to eliminate memory-related bugs in software written in languages like C++, according to Microsoft Rust […] More
[embedded content] A severe privilege escalation vulnerability has been patched in the Windows Docker Desktop Service. On Friday, cybersecurity researchers from Pen Test Partners publicly disclosed the problem, a privilege escalation vulnerability buried in how the software uses pipes. The vulnerability, tracked as CVE-2020-11492, was discovered after analyzing how Docker Desktop for Windows — the […] More
Microsoft’s Security Intelligence team has warned that it has been tracking a “massive” phishing campaign that attempts to install a remote access tool onto PCs by tricking users into opening email attachments containing malicious Excel 4.0 macros. Microsoft said the COVID-19 themed campaign started on May 12, and has so far used several hundreds of […] More
