FreshRSS

πŸ”’
☐ β˜† βœ‡ Naked Security

Firefox 99 is out – no major bugs, but update anyway!

By Paul Ducklin β€” April 5th 2022 at 16:21
Firefox's four-weekly updates just dropped - here's what you need to know.

☐ β˜† βœ‡ Naked Security

Google’s monthly Android updates patch numerous β€œget root” holes

By Paul Ducklin β€” April 5th 2022 at 14:44
Get the update now... if it's available for your phone. Here's how to check.

android-1200

☐ β˜† βœ‡ Naked Security

Apple patches 87 security holes – from iPhones and Macs to Windows

By Paul Ducklin β€” March 15th 2022 at 16:36
Lots of fixes, with data leakage flaws and code execution bugs patched on iPhones, Macs and even Windows.

apple-1200

☐ β˜† βœ‡ Naked Security

Apple fixes Safari data leak (and patches a zero-day!) – update now

By Paul Ducklin β€” January 27th 2022 at 21:09
That infamous "supercookie" bug in Safari has now been fixed. Oh, and there was a zero-day kernel hole as well.

apple-1200

☐ β˜† βœ‡ Naked Security

Wormable Windows HTTP hole – what you need to know

By Paul Ducklin β€” January 12th 2022 at 16:24
One bug in the January 2022 Patch Tuesday list is getting lots of attention: "HTTP Protocol Stack Remote Code Execution Vulnerability".

☐ β˜† βœ‡ Naked Security

FTC threatens β€œlegal action” over unpatched Log4j and other vulns

By Paul Ducklin β€” January 5th 2022 at 19:37
Remember the Equifax breach? Remember the $700m penalty? In case you'd forgotten, here's the FTC to refresh your memory!

☐ β˜† βœ‡ Naked Security

Log4Shell vulnerability Number Four: β€œMuch ado about something”

By Paul Ducklin β€” December 29th 2021 at 19:12
It's a Log4j bug, and you ought to patch it. But we don't think it's a critical crisis like the last one.

☐ β˜† βœ‡ Naked Security

Serious Security: OpenSSL fixes β€œerror conflation” bugs – how mixing up mistakes can lead to trouble

By Paul Ducklin β€” December 17th 2021 at 17:57
Have you ever seen the message "An error occurred"? Even worse, the message "This error cannot occur"? Facts matter!

☐ β˜† βœ‡ Naked Security

Apple security updates are out – and not a Log4Shell mention in sight

By Paul Ducklin β€” December 14th 2021 at 12:55
Get 'em while they're hot!

☐ β˜† βœ‡ Naked Security

Check your patches – public exploit now out for critical Exchange bug

By Paul Ducklin β€” November 23rd 2021 at 14:36
It was a zero-day bug until Patch Tuesday, now there's an anyone-can-use-it exploit. Don't be the one who hasn't patched.

☐ β˜† βœ‡ Naked Security

Patch Tuesday updates the Win 7 updater… for at most 1 more year of updates

By Paul Ducklin β€” November 10th 2021 at 19:45
The clock stopped long ago on Windows 7, except for those who paid for overtime. But there won't be any double overtime!

❌