Lots of people “run Linux” without really knowing or caring – many home routers, navigational aids, webcams and other IoT devices are based on it; the majority of the world’s mobile phones run a Linux-derived …
Serious Security: Linux full-disk encryption bug fixed – patch now! Read More »
Pick a random person, and ask them these two questions: Q1. Have you heard of Apache?Q2. If so, can you name an Apache product? We’re willing to wager that you will get one of two …
Apache’s other product: Critical bugs in ‘httpd’ web server, patch now! Read More »
Amongst all the brouhaha about Log4Shell, it’s easy to forget all the other updates that surround us. Not only is it Patch Tuesday (keep your eye on our sister site news.sophos.com for the latest on …
Apple security updates are out – and not a Log4Shell mention in sight Read More »
In this article, we explain the Apache Log4Shell vulnerability in plain English, and give you some simple educational code that you can use safely and easily at home (or even directly on your own servers) …
Log4Shell explained – how it works, why you need to know, and how to fix it Read More »
Renowned bug-hunter Tavis Ormandy of Google’s Project Zero team recently found a critical security flaw in Mozilla’s cryptographic code. Many software vendors rely on third-party open source cryptographic tools, such as OpenSSL, or simply hook …
Google’s Cybersecurity Action Team just published the first ever edition of a bulletin entitled Cloud Threat Intelligence. The primary warnings are hardly surprising (regular Naked Security visitors will have read about them here for years), …
Cloud Security: Don’t wait until your next bill to find out about an attack! Read More »
Tommy Mysk and Talal Haj Bakry describe themselves as two iOS developers and occasional security researchers on two continents. In other words, although cybersecurity isn’t their core business, they’re doing what we wish all programmers …
Apple’s Privacy Protection feature – watch out if you have a Watch! Read More »
Well-known email tracking organisation Spamhaus, which maintains lists of known senders of spams and scams, is warning of a fraudulent “FBI/Homeland Security” alert that has apparently been widely circulated to network administrators and other IT …
DHS warning about hackers in your network? Don’t panic! Read More »
If you use the venerable Samba open source tool anywhere on your network, you’ll want to read up on the latest update, version 4.15.2. Samba is the closest pronounceable word to SMB that Andrew Tridgell, …
Samba update patches plaintext passwork plundering problem Read More »
The name “Kaseya” has become one of the biggest words in ransomware infamy. Cybercriminals penetrated the IT management business Kaseya earlier this year and used the company’s own remote management tools to wreak simultaneous ransomware …
Kaseya ransomware suspect nabbed in Poland, $6m seized from absent colleague Read More »
The well-known and widely-used encryption library OpenSSL released a security patch earlier this week. Full article
Yesterday, we wrote about a vaguely mysterious zero-day patch pushed out by Apple. Like almost all Apple security fixes, the update arrived without any sort of warning, but unlike most Apple updates, only a single …
Microsoft researcher found Apple 0-day in March, didn’t report it Read More »