Security News

Unofficial Patch Released for Adobe Reader Zero-Day
2019-02-12 13:35

One day before Adobe’s monthly security updates, a third-party fix has been released for an Adobe Reader vulnerability revealed several weeks ago. read more

Temporary Patch Released For Adobe Reader Zero-Day
2019-02-11 19:20

The zero-day flaw in Adobe Reader DC could allow bad actors to steal victims’ NTLM hashes.

Apple fixes FaceTime eavesdropping bug, two iOS zero-days
2019-02-08 11:08

Apple has pushed out critical security updates for iOS and macOS, which fix the “Facepalm” FaceTime eavesdropping bug but also two zero-day flaws that, according to Google researchers, have been...

Google Spots Attacks Exploiting iOS Zero-Day Flaws
2019-02-08 09:55

Google security researchers revealed that two of the vulnerabilities patched by Apple on Thursday with the release of iOS 12.1.4 were zero-day flaws exploited in the wild by malicious actors. read more

Latest iOS 12.1.4 Update Patches 2 Zero-Day and FaceTime Bugs
2019-02-08 08:03

Apple has finally released iOS 12.1.4 software update to patch the terrible Group FaceTime privacy bug that could have allowed an Apple user to call you via the FaceTime video chat service and...

Zero-day Vulnerability Highlights the Responsible Disclosure Dilemma
2019-02-07 17:30

A zero-day vulnerability found in a video-conferencing system and responsibly disclosed led to the response, "Our developers are aware of some known vulnerabilities with the systems, development...

MacOS Zero-Day Exposes Apple Keychain Passwords
2019-02-06 22:14

A researcher who discovered a flaw letting him steal passwords in MacOS is not sharing his findings with Apple without a macOS bug bounty program.

macOS Mojave Zero-Day Allows Theft of Keychain Passwords
2019-02-06 16:45

A researcher has disclosed the existence of a zero-day vulnerability in macOS Mojave that can be exploited by malware to steal plaintext passwords from the operating system’s Keychain. The flaw...

I won't bother hunting and reporting more Sony zero-days, because all I'd get is a lousy t-shirt
2019-02-05 23:56

It's 2019. Should billion-dollar corps do better than offer swag for vulns? Analysis Hunting for exploitable security bugs in software is not an easy way to make a living, and vulnerability...

Zero-Days in WordPress Plugin Actively Exploited
2019-01-28 18:33

The commercial Total Donations plugin for WordPress is impacted by multiple zero-day vulnerabilities that are being actively exploited in attacks, Wordfence security researchers report.  read more