Security News > 2021

New Chrome for iOS feature locks Incognito tabs with Face ID
2021-02-21 13:31

Google Chrome for iOS is getting a new privacy feature that lets you lock your opened Incognito tabs behind your iPhone's Face ID or Touch ID biometric authentication features. If a user leaves their phone unlocked, someone can launch Chrome and view the currently open Incognito mode tabs.

Chrome for iOS will let you lock Incognito mode with Face ID
2021-02-21 13:31

Google Chrome for iOS is getting a new privacy feature that lets you lock your opened Incognito tabs behind your iPhone's Face ID or Touch ID biometric authentication features. If a user leaves their phone unlocked, someone can launch Chrome and view the currently open Incognito mode tabs.

Week in review: Most used MITRE ATT&CK tactics, boosting the “Sec” in DevSecOps
2021-02-21 08:55

Phishers tricking users via fake LinkedIn Private Shared DocumentPhishers are trying to trick users into opening a "LinkedIn Private Shared Document" and entering their login credentials into a fake LinkedIn login page, security researcher JB Bowers warns. Apple details major security, privacy enhancements in its devicesApple has released on Thursday a newer version of its Platform Security Guide, outlining the security and privacy innovations and improvements its users will be able to take advantage of.

Microsoft Edge is crowdsourcing whether to show notification prompts
2021-02-20 20:05

Microsoft is now using crowdsourcing to determine whether to show a site's website subscription dialog prompt in the Microsoft Edge web browser. After Microsoft rolled out their quiet notification requests feature in Edge 84, they noticed a significant drop in undesired notifications dialog prompts, but at the same time, legitimate sites' notifications were affected as well.

Kroger data breach exposes pharmacy and employee data
2021-02-20 17:57

Supermarket giant Kroger has suffered a data breach after a service used to transfer files securely was hacked, and threat actors stole files. Yesterday, Kroger disclosed that they were the latest company to be affected by a security vulnerability in the Accellion FTA software that allowed hackers to steal data from companies utilizing the service.

Recently fixed Windows zero-day actively exploited since mid-2020
2021-02-20 15:31

Microsoft says that a high-severity Windows zero-day vulnerability patched during the February 2021 Patch Tuesday was exploited in the wild since at least the summer of 2020 according to its telemetry data. The actively exploited zero-day bug is tracked as 'CVE-2021-1732 - Windows Win32k Elevation of Privilege Vulnerability.

Windows 10 21H1 coming soon, here are the new features
2021-02-20 14:31

Earlier this week, Microsoft officially announced the Windows 10 version 21H1 update and it'll begin rolling out to consumers in the first half of this year. It's not a huge release and it does not bring a major overhaul to the operating system, but reports suggest that new features and UI improvements will be introduced later this year as part of 'Sun Valley' update.

Happy birthday, Python, you're 30 years old this week: Easy to learn, and the right tool at the right time
2021-02-20 13:10

"I do believe that Python just doesn't have the right priorities these days," said Armin Ronacher, director of engineering at software monitoring biz Sentry and creator of Flask, the popular Python web app framework, in an email interview with The Register. The shortcomings of Python's software packaging tools - the software used to set up Python environments and to download, install, and manage libraries - have been an issue for years.

Happy birthday, Python, you're 30 years old this week: Easy to learn, and the right tool at the right time
2021-02-20 13:10

"I do believe that Python just doesn't have the right priorities these days," said Armin Ronacher, director of engineering at software monitoring biz Sentry and creator of Flask, the popular Python web app framework, in an email interview with The Register. The shortcomings of Python's software packaging tools - the software used to set up Python environments and to download, install, and manage libraries - have been an issue for years.

SonicWall releases additional update for SMA 100 vulnerability
2021-02-20 08:03

SonicWall has released a second firmware update for an SMA-100 zero-day vulnerability known to be used in attacks and is warning to install it immediately. Yesterday, SonicWall announced new firmware updates for SMA-100 series devices that provide additional safeguards discovered since their last update.