Security News

Apple confirms WebKit security updates break browsing on some sites
2023-07-11 15:42

Apple confirmed today that emergency security updates released on Monday to address a zero-day bug exploited in attacks also break browsing on some websites. The company advises customers who have already applied the buggy security updates to remove them if they're experiencing issues while browsing the web.

Owncast, EaseProbe security vulnerabilities revealed
2023-07-11 08:00

Oxeye has uncovered two critical security vulnerabilities and recommends immediate action to mitigate risk. The vulnerabilities were discovered in Owncast and EaseProbe, two open-source platforms written in Go. Owncast vulnerability.

Serious Security: Rowhammer returns to gaslight your computer
2023-07-10 21:22

The bad news here is that, because reading from DRAM forces the hardware to write the data back to the same memory cells right away, you only need read access to a particular bunch of memory cells in order to trigger low-level electronic rewrites of those cells. Simply put, merely by reading from the same block of DRAM memory over and over in a tight loop, you automatically cause it to be rewritten at the same rate, thus greatly increasing the chance that you'll deliberately, if largely unpredictably, induce one or more "Bit flips" in nearby memory cells.

Hiring Kit: Security Analyst
2023-07-10 16:00

In general, security analysts are tasked with identifying weaknesses in current security systems and developing solutions to close security vulnerabilities. SALARY RANGE. According to Glassdoor, the salary for a security analyst in the United States can be as low as $54,000 per year or as high as $135,000 per year.

Streamlining security operations with automated incident response
2023-07-10 14:02

Automated incident response capabilities are not uniformly available across different security tools such as endpoint detection and response, and security information and event management as it largely depends on the vendor. Wazuh provides an active response module that performs automated incident response capabilities.

New Mozilla Feature Blocks Risky Add-Ons on Specific Websites to Safeguard User Security
2023-07-10 12:57

Mozilla has announced that some add-ons may be blocked from running on certain sites as part of a new feature called Quarantined Domains. "We have introduced a new back-end feature to only allow some extensions monitored by Mozilla to run on specific websites for various reasons, including security concerns," the company said in its Release Notes for Firefox 115.0 released last week.

Improve Your Security WordPress Spam Protection With CleanTalk Anti-Spam
2023-07-08 06:14

Every website owner or webmaster grapples with the issue of spam on their website forms. CleanTalk Anti-Spam is a cloud-based tool designed to block various types of spam that website administrators encounter daily.

Close Security Gaps with Continuous Threat Exposure Management
2023-07-07 10:37

Leading analyst firm Gartner Research describes the solution: "By 2026, organizations prioritizing their security investments based on a continuous exposure management program will be 3x less likely to suffer from a breach." IT and security teams constantly face threat exposures, and they must proactively address critical security gaps in their exposed assets.

Android July security updates fix three actively exploited bugs
2023-07-06 09:44

Google has released the monthly security updates for Android operating system, which comes with fixes for 46 vulnerabilities. Three of the issues are likely actively exploited in the wild.

Island Enterprise Browser: Intelligent security built into the browsing session
2023-07-05 03:30

In this Help Net Security interview, Mike Fey, CEO of Island, explains the differences between consumer browsers and the Island Enterprise Browser, how it protects organizations' data, and how it uses contextual information to provide users with a safe browsing experience. How does the Island Enterprise Browser create intelligent boundaries across users, devices, networks, and locations?