-
Spanish spyware outfit uncovered, develops exploits for Windows, Chrome, and FirefoxNews Google was only able to discover the company after an anonymous submission was made to its Chrome bug reporting programme
News -
Google rolls out patch for high-severity Chrome browser zero dayNews It's the eighth time this year Google has been forced to address a zero-day vulnerability in its world-leading browser
News -
Second-ever OpenSSL critical vulnerability teased, 10 years after HeartbleedNews All OpenSSL versions beyond 3.0 are at risk, with more details due to be released alongside a patch on 1 November
News -
Apple patches actively exploited iPhone, iPad zero-day and 18 other security flawsNews The out-of-bounds write error is the eighth actively exploited zero-day impacting Apple hardware this year and could facilitate kernel-level code execution
News -
Fortinet reiterates call to mitigate against active zero-day, as customers delay fixesNews A large number of customers have yet to apply mitigations necessary to avoid the critical vulnerability
News -
Microsoft still searching for zero-day fixes following Patch TuesdayNews ProxyNotShell remains unaddressed even as Microsoft fixes several critical flaws in its monthly package of security patches
News -
Microsoft's third mitigation update for Exchange Server zero-day exploit bypassed within hoursNews The string of problematic temporary fixes for ‘ProxyNotShell’ grows longer after a 'confusing' and 'atypical' week-long vulnerability disclosure process
News -
Apple patches yet another zero-day flaw in substantial security updateNews The updates include fixes for kernel-level code execution bugs, privacy issues, and more - all impacting iPhone and iPad users
News -
Google’s Project Zero is frightening and reassuring in equal measureOpinion This crack team of security researchers are doing work we should all be grateful for
Opinion -
Apple breaks update policy to secure older iPhones and iPads against zero-dayNews It's been four years since the company patched an end-of-life device against a major vulnerability
News -
Apple patches 'superpower' zero-days affecting iPhones, iPads, and MacsNews The RCE and kernel-level bugs may have been actively exploited and could give high-level privileges to attackers
News -
Dogwalk RCE variant among 121 vulnerabilities fixed in Microsoft's August Patch TuesdayNews The second-biggest security update released by Microsoft this year featured 17 critical-rated RCEs and privilege escalation bugs
News
