Vulnerability – Page 13 – Computer Security Articles

Credit to Author: Yaniv| Date: Thu, 18 Apr 2019 15:35:40 +0000

Editor’s note: This article is a technical description of a bug discovered by a member of the Offensive Research team at SophosLabs, and how the researcher created a proof-of-concept “Arbitrary Read/Write Primitive” exploit for this bug. The vulnerability was deemed critical by Mozilla’s bug tracking team and was patched in Firefox 65.0. It’s written for […]<img src=”http://feeds.feedburner.com/~r/sophos/dgdY/~4/oTcYk6i594c” height=”1″ width=”1″ alt=””/>

Microsoft Security

April 8, 2019 admin

From alert to driver vulnerability: Microsoft Defender ATP investigation unearths privilege escalation flaw

Credit to Author: Eric Avena| Date: Mon, 25 Mar 2019 15:00:07 +0000

Our discovery of two privilege escalation vulnerabilities in a driver highlights the strength of Microsoft Defender ATP’s sensors. These sensors expose anomalous behavior and give SecOps personnel the intelligence and tools to investigate threats, as we did.

The post From alert to driver vulnerability: Microsoft Defender ATP investigation unearths privilege escalation flaw appeared first on Microsoft Security .

Kaspersky Security

March 28, 2019 admin

Using WinRAR? Install this update right away

Credit to Author: Marina Mash| Date: Thu, 28 Mar 2019 15:39:30 +0000

A bug in WinRAR allows malefactors to gain full control over your device. All they need you to do is unpack a rigged RAR file.

Security Sophos

March 14, 2019 admin

What you need to know for Patch Tuesday, March 2019

Credit to Author: Andrew Brandt| Date: Thu, 14 Mar 2019 13:00:46 +0000

By SophosLabs Offensive Security Research Microsoft released their monthly security updates for March this past Tuesday. This month’s fixes address 64 vulnerabilities that affect Windows and a range of software that runs on Windows, mainly the Internet Explorer and Edge browsers. In addition, there was a patch released for one critical vulnerability in Adobe Flash. […]<img src=”http://feeds.feedburner.com/~r/sophos/dgdY/~4/Vlj59LNV68Y” height=”1″ width=”1″ alt=””/>

MalwareBytes Security

March 11, 2019 admin

A week in security (March 4 – 11)

Credit to Author: Malwarebytes Labs| Date: Mon, 11 Mar 2019 15:47:27 +0000

A roundup of cybersecurity news from March 4–11, including a Chrome zero-day, Labs’ data privacy report, news from RSA, and more.

Categories:

Tags: Apple Baby Boomer Baby Boomers chrome data privacy laws dev-fuse Gen Zed Google Chrome iPhone machine learning Millennial Millennials National Security Agency NSA ransom.troldesh ransomware RSA RSA Conference shade study surveillance survey Tim Apple Tim Cook Troldesh Troldesh ransomware ultrasound ultrasound scanning US data privacy laws Verizon vulnerability week in security zero day zombie email

(Read more…)

The post A week in security (March 4 – 11) appeared first on Malwarebytes Labs.

MalwareBytes Security

March 8, 2019 admin

Google Chrome zero-day: Now is the time to update and restart your browser

Credit to Author: Malwarebytes Labs| Date: Fri, 08 Mar 2019 19:13:15 +0000

A particularly dangerous Google Chrome zero-day is already being used in real-world attacks. Despite Google’s auto update feature, users will need to close and restart their browser in order to be protected.

Categories:

Exploits

Tags: 0day chrome exploit exploits Google vulnerability zero day

MalwareBytes Security

March 1, 2019 admin

Spectre, Google, and the Universal Read Gadget

Credit to Author: Christopher Boyd| Date: Fri, 01 Mar 2019 16:43:37 +0000

A recently released paper by Google has resurrected the spirit of Spectre, a seemingly never-ending threat to most makes of processor. We take a look at what this means, and what the Universal Read Gadget means for most technology users.

Categories:

Tags: CPU exploit Google Meltdown meltdown and spectre Spectre universal read gadget vulnerability

(Read more…)

The post Spectre, Google, and the Universal Read Gadget appeared first on Malwarebytes Labs.

QuickHeal Security

February 5, 2019 admin

3 essential ways to strengthen your business data security

Credit to Author: Sushmita Kalashikar| Date: Tue, 05 Feb 2019 12:53:26 +0000

For any business big or small, business data is an asset that they cannot afford to compromise at any cost. With a huge amount of data, from employee details to the credit card details of customers, stored in the form of vulnerable electronic records, the loss of even a single…