Techmeme

Results 11 - 20 of about 584:

Dan Goodin / Ars Technica:
Microsoft's May 2018 Patch Tuesday fixes 68 security issues, 21 of them critical, including one being actively exploited to hack users   —  Latest Patch Tuesday included 68 fixes, 21 of them rated “critical.”  —  Microsoft on Tuesday patched two Windows vulnerabilities that attackers …
May 9, 2018, 6:50 AMIn context
Dan Goodin / Ars Technica:
After opsec errors, researchers link many hacker groups active for a decade and previously thought to be independent, to China's govt, name them Winnti Umbrella   —  Though sloppy at times, Winnti Umbrella remain advanced and extremely prolific.  —  Researchers said Chinese intelligence officers …
May 6, 2018, 5:05 PMIn context
Dan Goodin / Ars Technica:
Researchers demonstrate GLitch, an Android exploit that uses Rowhammer attack to remotely execute code; Chrome is patched; Firefox's next patch attempt due 5/9   —  JavaScript based GLitch pwns browsers by flipping bits inside memory chips.  —  Over the past few years …
May 3, 2018, 6:14 PMIn context
Dan Goodin / Ars Technica:
15-year-old hacker exposes vulnerability in popular “tamper-proof” Ledger hardware cryptocurrency wallets that have sold by the millions   —  Backdoor allows attacker to recover private keys stored on Ledger hardware wallets.  —  For years, executives at France-based Ledger …
Mar 21, 2018, 8:35 AMIn context
Dan Goodin / Ars Technica:
Calendar 2 for Mac updated to mine Monero by default; after poor reviews, dev removes app from App Store, says mining will be gone in new version, citing bugs   —  Popular Calendar 2 app mines Monero by default, but at least it discloses it.  —  Resource-draining currency miners …
Mar 12, 2018, 4:25 PMIn context
Dan Goodin / Ars Technica:
Kaspersky Lab details sophisticated Slingshot malware likely used for spying on targeted individuals and organizations, which remained hidden for six years   —  Nation-sponsored Slingshot is one of the most advanced attack platforms ever.  —  Researchers have discovered malware so stealthy …
Mar 11, 2018, 5:00 AMIn context
Dan Goodin / Ars Technica:
Researchers find bug in Exim message transfer tool that allows remote code execution, affecting up to 400K servers   —  Widely used message transfer agent patched buffer overflow last month.  —  A bug in an obscure but widely used email program may be putting as many as 400,000 servers around …
Mar 7, 2018, 12:05 PMIn context
Dan Goodin / Ars Technica:
Developers fix vulnerability in geth, an app to run Ethereum nodes, that let “any kid with a machine and a script” steal funds, according to researchers   —  Hole made it possible to trick users into double spending and hack smart contracts.  —  Developers of Ethereum …
Mar 3, 2018, 3:50 PMIn context
Dan Goodin / Ars Technica:
Researchers say some security certificates are being sold and registered using stolen corporate identities, making traditional network security less effective   —  Certificates registered in names of real corporations are surprisingly easy to come by.  —  The Stuxnet worm that targeted …
Feb 23, 2018, 9:05 PMIn context
Dan Goodin / Ars Technica:
Google's Project Zero researchers find easy-to-exploit vulnerabilities in uTorrent for Windows and web that allow code execution, more; fixes rolling out soon   —  Developers are in the process of releasing updates to fix the critical flaws.  —  Two versions of uTorrent …
Feb 21, 2018, 12:10 PMIn context

Sponsor Posts

Specops Software:
NIST has spoken: death to compromised passwords  —  Block a billion leaked passwords today.  Start a free trial.
eero:
The eero Plus experience keeps getting better with regular updates.  —  With the latest version of the eero app for iOS and Android, it's now easy to track your eero Plus daily, weekly, and monthly activity of Inspections …
Smartsheet:
How to build a high-yielding M&A program  —  Record-breaking M&A activity is expected in the years to come.  What does this mean for your company?
Zoho:
Announcing Zoho PageSense for G Suite  —  Zoho PageSense the complete conversion rate optimization software is now available for G Suite users.  Simply connect your Google account with Zoho PageSense to easily collaborate …
Freshworks:
Your sales force needs a better CRM  —  With Freshsales CRM, your team can now use AI-based lead scoring, built-in phone, email, activity capture and more.  Sign up for free!
Google Chrome:
Chrome's turning 10, here's what's new  —  Every time you open your browser, you have a mission to accomplish.  We built Chrome to help you do that as quickly and safely as possible.