Vulnerability

(get it in RSS or Atom)

D-Link patches critical router flaws, says more fixes to come

by Lee Munson on March 4, 2015 | Leave a comment

D-Link has taken action over three serious vulnerabilities discovered in several of its home routers, and it's promising more fixes next week.

Bought PII from the government? PLEASE DON'T LOSE IT! 60 Sec Security [VIDEO]

by Paul Ducklin on February 28, 2015 | Leave a comment

Here's the latest episode of our weekly computer security roundup.

The latest news presented so you can enjoy it...in just one minute!

Facebook Bug Bounty report for 2014: $1.3M paid out to more than 700 bug finders

by Paul Ducklin on February 27, 2015 | Leave a comment

Facebook just released details of how much it paid out in bug bounties for 2014.

Rewards ranged from $500 to over $50,000...

SSCC 187 - The cryptography edition [PODCAST]

by Paul Ducklin on February 26, 2015 | Leave a comment

Sophos expert John Shier sits in for regular presenter Chester Wisniewski in this episode.

John and Paul Ducklin dissect the latest security issues, which were dominated this week by some thorny matters of cryptography.

Google turns Pwnium into an all-year, unlimited-rewards bug-hunting contest

by Lisa Vaas on February 26, 2015 | 2 Comments

Google's new thinking around bug hunting: get it to us ASAP, from wherever you are.

From the Labs: more advances in Advanced Persistent Threats

by Paul Ducklin on February 25, 2015 | Leave a comment

SophosLabs researcher Gabor Szappanos is back.

He presents another insightful installment in the ongoing saga of PlugX and other "malware factories" that are part of the Advanced Persistent Threat scene.

What's SUPER and helps you to PHISH, sorry, FISH? 60 Sec Security [VIDEO]

by Paul Ducklin on February 21, 2015 | Leave a comment

Here's our weekly news roundup - from Superfish to Super Spectacles.

It's amusing, informative, and only takes a minute - enjoy!

Lenovo "Superfish" controversy - what you need to know

by Paul Ducklin on February 20, 2015 | 13 Comments

Controversy of the week is "Superfish," an adware program pre-installed on Lenovo computers that has some worrying security problems.

Here's what you need to know, in plain English...

FreeBSD and the YARNBUG - more trouble at the Random Number Mill

by Paul Ducklin on February 19, 2015 | 15 Comments

How do you test your random number generator?

How do you determine, in an ordered way, that a sequence of numbers is entirely disordered?

With difficulty!

SSCC 186 - Just how firm is your firmware? [PODCAST]

by Paul Ducklin on February 18, 2015 | 2 Comments

Here's the latest episode of our weekly security podcast - from firmware and Firefox to Project Zero and Lightning conductors.

Chet and Duck are in fine fettle as usual...enjoy!

Google's Project Zero backs off a bit - will now give up to 14 days' grace

by Paul Ducklin on February 16, 2015 | 9 Comments

Google's controversial "zero-day dropping machine," Project Zero, which automatically outs your bugs after 90 days, will now give up to 14 day's leeway.

News flash: hacker turns Apple's Lightning connector into a jailbreak conductor

by Paul Ducklin on February 16, 2015 | Leave a comment

A French hacker says he'll soon be making modified Lightning connector cables that will give Apple iOS jailbreakers a better view inside their iDevices.