FreshRSS

πŸ”’
☐ β˜† βœ‡ WIRED

A Single Flaw Broke Every Layer of Security in MacOS

By Matt Burgess β€” August 12th 2022 at 23:00
An injection flaw allowed a researcher to access all files on a Mac. Apple issued a fix, but some machines may still be vulnerable.
☐ β˜† βœ‡ WIRED

Zoom’s Auto-Update Feature Came With Hidden Risks on Mac

By Lily Hay Newman β€” August 12th 2022 at 20:34
The popular video meeting app makes it easy to keep the software up to dateβ€”but it also introduced vulnerabilities.
☐ β˜† βœ‡ WIRED

The US Offers a $10M Bounty for Intel on Conti Ransomware Gang

By Matt Burgess β€” August 11th 2022 at 18:09
The State Department organization has called for people to share details about five key members of the hacking group.
☐ β˜† βœ‡ WIRED

Sloppy Software Patches Are a β€˜Disturbing Trend’

By Lily Hay Newman β€” August 11th 2022 at 17:28
The Zero Day Initiative has found a concerning uptick in security updates that fail to fix vulnerabilities.
☐ β˜† βœ‡ WIRED

Google's Android Red Team Had a Full Pixel 6 Pwn Before Launch

By Lily Hay Newman β€” August 10th 2022 at 21:38
Before the flagship phone ever landed in users’ hands, the security team thoroughly hacked it by finding bugs and developing exploits.
☐ β˜† βœ‡ WIRED

The Hacking of Starlink Terminals Has Begun

By Matt Burgess β€” August 10th 2022 at 14:00
It cost a researcher only $25 worth of parts to create a tool that allows custom code to run on the satellite dishes.
☐ β˜† βœ‡ WIRED

One of 5G’s Biggest Features Is a Security Minefield

By Lily Hay Newman β€” August 9th 2022 at 22:46
New research found troubling vulnerabilities in the 5G platforms carriers offer to wrangle embedded device data.
☐ β˜† βœ‡ WIRED

GitHub Moves to Guard Open Source Against Supply Chain Attacks

By Lily Hay Newman β€” August 8th 2022 at 23:19
The popular Microsoft-owned code repository plans to roll out code signing, which will help beef up the security of open source projects.
☐ β˜† βœ‡ WIRED

The US Emergency Alert System Has Dangerous Flaws

By Andrew Couts β€” August 6th 2022 at 13:00
Plus: A crypto-heist extravaganza, a peek at an NSO spyware dashboard, and more.
☐ β˜† βœ‡ WIRED

A Slack Bug Exposed Some Users’ Hashed Passwords for 5 Years

By Lily Hay Newman β€” August 5th 2022 at 22:09
The exposure of cryptographically scrambled passwords isn’t a worst-case scenarioβ€”but it isn’t great, either.
☐ β˜† βœ‡ WIRED

An Attack on Albanian Government Suggests New Iranian Aggression

By Lily Hay Newman β€” August 4th 2022 at 21:30
A Tehran-linked hack of a NATO member marks a significant escalation against the backdrop of US-Iran nuclear talks.
☐ β˜† βœ‡ WIRED

The Microsoft Team Racing to Catch Bugs Before They Happen

By Lily Hay Newman β€” August 3rd 2022 at 16:43
What's it like to be responsible for a billion people's digital security? Just ask the company's Morse researchers.
☐ β˜† βœ‡ WIRED

A New Attack Easily Knocked Out a Potential Encryption Algorithm

By Dan Goodin, Ars Technica β€” August 3rd 2022 at 13:00
SIKE was a contender for post-quantum-computing encryption. It took researchers an hour and a single PC to break it.
☐ β˜† βœ‡ WIRED

The January 6 Secret Service Text Scandal Turns Criminal

By Lily Hay Newman β€” July 23rd 2022 at 13:00
Plus: The FCC cracks down on car warranty robocalls, Thai activists get targeted by NSO's Pegasus, and the Russia-Ukraine cyberwar continues.
☐ β˜† βœ‡ WIRED

The 2022 US Midterm Elections' Top Security Issue: Death Threats

By Lily Hay Newman β€” July 21st 2022 at 14:52
While cybersecurity and foreign meddling remain priorities, domestic threats against election workers have risen to the top of the list.
☐ β˜† βœ‡ WIRED

Instagram Slow to Tackle Bots Targeting Iranian Women’s Groups

By Lily Hay Newman β€” July 19th 2022 at 19:40
Despite alerting Meta months ago, feminist groups say tens of thousands of fake accounts continue to bombard them on the platform.
☐ β˜† βœ‡ WIRED

Amazon Handed Ring Videos to Cops Without Warrants

By Matt Burgess β€” July 16th 2022 at 13:00
Plus: A wild Indian cricket scam, an elite CIA hacker is found guilty of passing secrets to WikiLeaks, and more of the week's top security news.
☐ β˜† βœ‡ WIRED

A New Attack Can Unmask Anonymous Users on Any Major Browser

By Lily Hay Newman β€” July 14th 2022 at 11:00
Researchers have found a way to use the web's basic functions to identify who visits a siteβ€”without the user detecting the hack.
☐ β˜† βœ‡ WIRED

New β€˜Retbleed’ Attack Can Swipe Key Data From Intel and AMD CPUs

By Dan Goodin, Ars Technica β€” July 13th 2022 at 16:00
The exploit can leak password information and other sensitive material, but the chipmakers are rolling out mitigations.
☐ β˜† βœ‡ WIRED

Chinese Police Exposed 1B People's Data in Unprecedented Leak

By Lily Hay Newman β€” July 9th 2022 at 13:00
Plus: A duplicitous bug bounty scheme, the iPhone's new β€œlockdown mode,” and more of the week's top security news.
☐ β˜† βœ‡ WIRED

Will These Algorithms Save You From Quantum Threats?

By Amit Katwala β€” July 8th 2022 at 15:10
Quantum-proof encryption is hereβ€”decades before it can be put to the test.
❌