August 29, 2023 For the win? Offensive research contests on criminal forums We explore some of the entries in recent cybercrime research competitions, and what they say about threat actor innovation and priorities Threat Research
July 25, 2023 Apple ships that recent “Rapid Response” spyware patch to everyone, fixes a second zero-day Another month, another patch for in-the-wild iPhone malware (and a whole lot more). Naked Security
July 20, 2023 S3 Ep144: When threat hunting goes down a rabbit hole Latest episode - check it out now! Naked Security
June 05, 2023 Update 6: Information on MOVEit Vulnerabilities CVE-2023-34362, CVE-2023-35036, CVE-2023-35708, and CVE-2023-36934 Users of the file-transfer package should apply patches immediately and check for indications of possible compromise Security OperationsThreat Research
May 19, 2023 Apple’s secret is out: 3 zero-days fixed, so be sure to patch now! All Apple users have zero-days that need patching, though some have more zero-days than others. Naked Security
April 25, 2023 PaperCut security vulnerabilities under active attack – vendor urges customers to patch If you have the product, but you haven't patched - well, the crooks have now landed, so please don't delay. Do it today... Naked Security
April 12, 2023 Patch Tuesday: Microsoft fixes a zero-day, and two curious bugs that take the Secure out of Secure Boot Is Secure Boot without the Secure just "Boot"? Naked Security
April 10, 2023 Apple zero-day spyware patches extended to cover older Macs, iPhones and iPads That double-whammy Apple browser-to-kernel spyware bug combo we wrote up last week? Turns out it applies to all supported Macs and iDevices - patch now! Naked Security
April 09, 2023 Popular server-side JavaScript security sandbox “vm2” patches remote execution hole The security error was in the error handling system that was supposed to catch potential security errors... Naked Security