A decade of vulnerabilities and predictions for 2012
Since 2001, Spanish security firm S21sec has been been compiling a database of vulnerabilities detected by themselves and those reported by a great number of sources which …
Microsoft adds new protection mechanisms to IE 10
At the CanSecWest conference held last week in Vancouver, a team of vulnerability researchers from French security firm VUPEN has managed to hack Microsoft’s Internet …
Apple fixes 83 vulnerabilities in Safari
Apple issued a patch for Safari, fixing 83 vulnerabilities, 72 of which were rated critical. Since Safari and Chrome both use WebKit, the open-source browser engine, it allows …
Teen exploits three 0-days to hack Chrome, earns $60K from Google
The end of this year’s editions of the Pwn2Own and Pwnium contests has been marked by another Chrome hack, executed by a teenage security researcher that goes by the …
Chrome already pwned twice at CanSecWest
The annual CanSecWest conference opened on Wednesday in Vancouver, and before the first session even started, Google’s Chrome was exploited successfully not once, but …
Protection against malicious URLs and attachments
Invincea announced the availability of a greatly expanded product suite to address emerging vectors of attacks against users. Building off of its approach to breach prevention …
Microsoft says Google also bypassed IE’s privacy settings
Following the discovery that Google and other online advertising companies are bypassing Safari’s default “no tracking” settings with specific code inserted …
Chrome to stop using online checks to spot revoked certificates
Future versions of Google’s Chrome browser will no longer use online revocation checks to verify whether the HTTPS site the user wants to visit possesses a valid …
Public beta of Flash Player sandbox for Firefox is out
A little over a year after the implementation of a Flash Player sandbox into Google Chrome, Adobe has announced the release of a public beta of its new Flash Player sandbox …
Bogus “browser update” pages deliver malware
Fake “browser update” pages are currently being used to deliver malware and redirect users to survey pages, warns GFI. Their malware researchers have recently …
Pwn2Own 2012: Changed rules, bigger prizes, no more mobile hacks
Pwn2Own, one of the most anticipated hacking contests that takes place each year at the CanSecWest conference in Vancouver, British Columbia, is set to unfold under …
Firefox 9 closes security holes
Mozilla released Firefox 9 that fixes several security and stability issues. Crash when plugin removes itself on Mac OS X FireBreath developer Richard Bateman reported a crash …
Featured news
Resources
Don't miss
- ShutterGap: Aryon Security finds 3.7M AWS cloud resources exposed beyond CSPM/CNAPP visibility
- An AI agent can pass every safety check and still leak secrets
- The energy sector’s OT cybersecurity talent is retiring faster than it can be replaced
- Your AI agents can reach data no one approved
- Hugging Face breach reignites open-weights debate, raises liability questions