Sophos Security Chet Chat – Episode 195 – April 1, 2015 Here’s our latest security podcast, featuring Sophos experts and Naked Security writers Chester Wisniewski and Paul Ducklin. This week, Chester is at the RSA Conference 2015, and the podcast Read more…
Tag Archives: Vulnerability
D-Link router user? Keep your ears and eyes open for the next firmware fixes!
A critical bug that leaves various D-Link routers wide open has apparently been patched… …except that the patches need patches. Watch out!
5 online privacy and security tips for travelers
Going on holiday or traveling for businesss any time soon? Here are 5 online privacy and security tips for when you’re on the road.
Woman sues Google after in-app purchases drain her bank account
She’s alleging that Google Play’s inadequate security let crooks siphon thousands of dollars in charges from her account.
If the “Deep Web” becomes searchable, is it still deep? 60 Sec Security [VIDEO]
Watch the latest episode of our only-takes-a-minute security roundup video! This week: From old crypto bugs to the latest Windows security holes…
SSCC 194 – Patch early? Patch often? This time, “Patch NOW!” [PODCAST]
Join Sophos experts Chester Wisniewski and Paul Ducklin for the latest episode of our weekly security podcast. From the very latest Update Tuesday to how we get rid of 10-year-old security holes, here’s the security news you can use.
Google fixes potential revenue-stealing “comment cloning” YouTube bug
Two Egyptian security researchers figured out how to clone other people’s YouTube comments. You could “borrow” approvals and positive reviews so that they appeared to promote your videos, too.
Tampering with US voting machine as easy as ‘abcde’, says Virginia report
All it would take to compromise it is to sit in the parking lot with a laptop, some free tools, and a dropper full of tech smarts.
Update Tuesday, April 2015 – Urgent action needed over Microsoft HTTP bug
We don’t usually focus on one vulnerability and say, “Do that first.” But this month, we’re willing to make an exception. The Microsoft HTTP stack has a bug that could let attackers straight in with a simple HTTP request…
TLS certificate blunder revisited – whither China Internet Network Information Center?
Just under three weeks ago, we wrote about a TLS certificate blunder by a Root Certificate Authority called CNNIC. We thought we’d revisit that story today to see how the Big Four browser makers responded to the lapse…