Security News

Custom Google App Engine Tweak Still Leads to Java Sandbox Escapes (Threatpost)
2015-10-22 13:06

Researchers at Security Explorations say a change implemented by Google to the Java security model as its implemented in the Google App Engine leads to sandbox escapes.

Details Surface on Patched Sandbox Violation Vulnerability in iOS (Threatpost)
2015-08-20 17:32

Apple patched an issue last week in iOS that could have allowed attackers to bypass the third-party app-sandbox protection mechanism on devices and read arbitrary managed preferences via a special app.

Google plugs Google Admin app sandbox bypass 0-day (Help Net Security)
2015-08-17 09:15

After having had some trouble with fixing a sandbox bypass vulnerability in the Google Admin Android app, the Google Security team has finally released on Friday an update that plugs the hole. Goog...