-
Spanish spyware outfit uncovered, develops exploits for Windows, Chrome, and Firefox
News Google was only able to discover the company after an anonymous submission was made to its Chrome bug reporting programme
News -
Google rolls out patch for high-severity Chrome browser zero day
News It's the eighth time this year Google has been forced to address a zero-day vulnerability in its world-leading browser
News -
Second-ever OpenSSL critical vulnerability teased, 10 years after Heartbleed
News All OpenSSL versions beyond 3.0 are at risk, with more details due to be released alongside a patch on 1 November
News -
Apple patches actively exploited iPhone, iPad zero-day and 18 other security flaws
News The out-of-bounds write error is the eighth actively exploited zero-day impacting Apple hardware this year and could facilitate kernel-level code execution
News -
Fortinet reiterates call to mitigate against active zero-day, as customers delay fixes
News A large number of customers have yet to apply mitigations necessary to avoid the critical vulnerability
News -
Microsoft still searching for zero-day fixes following Patch Tuesday
News ProxyNotShell remains unaddressed even as Microsoft fixes several critical flaws in its monthly package of security patches
News -
Microsoft's third mitigation update for Exchange Server zero-day exploit bypassed within hours
News The string of problematic temporary fixes for ‘ProxyNotShell’ grows longer after a 'confusing' and 'atypical' week-long vulnerability disclosure process
News -
Apple patches yet another zero-day flaw in substantial security update
News The updates include fixes for kernel-level code execution bugs, privacy issues, and more - all impacting iPhone and iPad users
News -
Google’s Project Zero is frightening and reassuring in equal measure
Opinion This crack team of security researchers are doing work we should all be grateful for
Opinion -
Apple breaks update policy to secure older iPhones and iPads against zero-day
News It's been four years since the company patched an end-of-life device against a major vulnerability
News -
Apple patches 'superpower' zero-days affecting iPhones, iPads, and Macs
News The RCE and kernel-level bugs may have been actively exploited and could give high-level privileges to attackers
News -
Dogwalk RCE variant among 121 vulnerabilities fixed in Microsoft's August Patch Tuesday
News The second-biggest security update released by Microsoft this year featured 17 critical-rated RCEs and privilege escalation bugs
News
