Here’s what to expect from Microsoft in the July 2014 edition of Patch Tuesday, scheduled to ship on Tuesday 08 July 2014… 
Tag Archives: Exploit
Is Apple slack at security on iOS? 60 Sec Security [VIDEO]
What went wrong with PayPal’s 2FA? Why did Microsoft do an email U-turn? Is Apple slack at security on iOS? It’ll only take a minute to find out…
SSCC 154: Fraud, viruses, patches and encryption (in that order!) [PODCAST]
Where does your country sit on the fraud list? Just how much can you trust SMSes on Android? Is Apple serious enough about iOS security? And will Google’s End-To-End email encryption plugin save the world? Find out with Chet and Duck in this week’s Chet Chat podcast…
Anatomy of a buffer overflow – Google’s “KeyStore” security module for Android
Here’s a cautionary tale about a bug, courtesy of IBM. Not that IBM had the bug, just to be clear: Google had the bug, and IBM researchers spotted it.
Apple ships updates, including Snow Leopard (ONLY KIDDING!)
Apple just published its latest round of updates for iOS, Apple TV, Safari and OS X, including dozens of security fixes. OS X Snow Leopard users…we’re afraid you missed out once again.
TimThumb plugin for WordPress – zero-day remote code execution hole disclosed, quickly fixed
WordPress sites with the TimThumb image thumbnailing plugin could be taken over by attackers. Paul Ducklin looks at what went wrong and explains how to fix the hole…
“Towelroot” app makes it easy to root Galaxy S5 and other locked Androids…
Galaxy S5 users will be cheering. System administrators are probably groaning. Paul Ducklin looks at an Android-era variant of Hamlet’s dilemma: “To root or not to root, that is the question.”
SSCC 153: TrueCrypt, Towelroot, Cryptowall, and spam in Canada [PODCAST]
Chester Wisniewski and Paul Ducklin present this week’s edition of the regular Sophos security podcast, the “Chet Chat.” In this episode: the TrueCrypt saga continues; the Towelroot software for unlocking Androids; ransomware after CryptoLocker; and Canada’s long, long, long-awaited anti-spam law.
59 vulns in IE, teenager versus Turing, and Twitter gets wormed – 60 Sec Security [VIDEO]
Is 59 vulns in IE some kind of record? Did a computer really pass the Turing Test? Can a network worm ever be a joke? Find out in one minute!
Patch Tuesday wrap-up, June 2014 – both Adobe and Microsoft close “remotable” holes
Microsoft fixed 59 vulnerabilities in Internet Explorer alone this month. Is that worryingly bad, or pleasingly good? Paul Ducklin investigates what actually came down the chute in the June 2014 Patch Tuesday…