Вторник исправлений, выпуск от октября 2021 года

Сегодня компанияMicrosoft выпустила обновления для устранения более 70 дыр в безопасности своих операционных систем Windows и другого программного обеспечения, включая одну уязвимость, которая уже используется. В этом месяце “вторник исправлений” также включает исправления безопасности для недавно выпущенной операционной системы Windows 11. Отдельно компания Apple выпустила обновления для iOS и iPadOS для устранения уязвимости, которая активно … Читать далее

Вторник исправлений Microsoft, выпуск от сентября 2021 года

Сегодня компанияMicrosoft выпустила обновления программного обеспечения для устранения десятков дыр в безопасности Windows и сопутствующих продуктов, включая уязвимость, которая уже используется в активных атаках. Кроме того, Apple выпустила экстренное обновление для устранения дефекта, который, как сообщается, использовался для установки шпионских программ на продукты iOS, а Google выпустила новую версию Chrome, в которой устранены две уязвимости … Читать далее

Apple Addresses iPhone 11 Location Privacy Concern

Apple is rolling out a new update to its iOS operating system that addresses the location privacy issue on iPhone 11 devices that was first detailed here last month. Beta versions of iOS 13.3.1 include a new setting that lets users disable the “Ultra Wideband” feature, a short-range technology that lets iPhone 11 users share … Читать далее

Apple Explains Mysterious iPhone 11 Location Requests

KrebsOnSecurity ran a story this week that puzzled over Apple‘s response to inquiries about a potential privacy leak in its new iPhone 11 line, in which the devices appear to intermittently seek the user’s location even when all applications and system services are individually set never to request this data. Today, Apple disclosed that this … Читать далее

Alleged SIM Swapper Arrested in California

Authorities in Santa Clara, Calif. have arrested and charged a 19-year-old area man on suspicion hijacking mobile phone numbers as part of a scheme to steal large sums of bitcoin and other cryptocurrencies. The arrest is the third known law enforcement action this month targeting “SIM swappers,” individuals who specialize in stealing wireless phone numbers … Читать далее

Why Is Your Location Data No Longer Private?

The past month has seen one blockbuster revelation after another about how our mobile phone and broadband providers have been leaking highly sensitive customer information, including real-time location data and customer account details. In the wake of these consumer privacy debacles, many are left wondering who’s responsible for policing these industries? How exactly did we … Читать далее

Scary Chip Flaws Raise Spectre of Meltdown

Apple, Google, Microsoft and other tech giants have released updates for a pair of serious security flaws present in most modern computers, smartphones, tablets and mobile devices. Here’s a brief rundown on the threat and what you can do to protect your devices. At issue are two different vulnerabilities, dubbed “Meltdown” and “Spectre,” that were … Читать далее

Flash Player is Dead, Long Live Flash Player!

Adobe last week detailed plans to retire its Flash Player software, a cross-platform browser plugin so powerful and so packed with security holes that it has become the favorite target of malware developers. To help eradicate this ubiquitous liability, Adobe is enlisting the help of Apple, Facebook, Google, Microsoft and Mozilla. But don’t break out the … Читать далее

iPhone Robbers Try to iPhish Victims

In another strange tale from the kinetic-attack-meets-cyberattack department, earlier this week I heard from a loyal reader in Brazil whose wife was recently mugged by three robbers who nabbed her iPhone. Not long after the husband texted the stolen phone — offering to buy back the locked device — he soon began receiving text messages stating … Читать далее

How the Pwnedlist Got Pwned

Last week, I learned about a vulnerability that exposed all 866 million account credentials harvested by pwnedlist.com, a service designed to help companies track public password breaches that may create security problems for their users. The vulnerability has since been fixed, but this simple security flaw may have inadvertently exacerbated countless breaches by preserving the data lost in them and … Читать далее