March 31, 2020

Patch now! Critical flaw found in OpenWrt router software

OpenWrt is an open source operating system used by millions of home and small business routers and embedded devices.

Naked Security

March 17, 2020

Slack fixes account-stealing bug

Slack has fixed a bug that allowed attackers to hijack user accounts by tampering with their HTTP sessions.

Naked Security

March 16, 2020

Microsoft patches wormable Windows 10 ‘SMBGhost’ flaw

What’s the difference between a scheduled security update and one that’s out-of-band? In this case, it's two days.

Naked Security

January 14, 2020

‘Cable Haunt’ vulnerability exposes 200 million cable modem users

A fortnight in to 2020 and we have the first security flaw to be given its own name: Cable Haunt - complete with eye-catching logo.

Naked Security

November 15, 2019

How the Linux kernel balances the risks of public bug disclosure

A serious Wi-Fi flaw shows how Linux handles security in plain sight.

Naked Security

August 19, 2019

Multiple HTTP/2 DoS flaws found by Netflix

Netflix has identified several denial of service (DoS) flaws in HTTP/2, a popular network protocol that underpins large parts of the web. Exploiting them could bring servers grinding to a halt.

Naked Security

May 16, 2019

Facebook restores disabled ‘View As’ feature used in 2018 breach

The feature still lets you see how others see you, but without leaking access tokens.

Naked Security

February 27, 2019

Nvidia patches eight security flaws in graphics products

Chip maker Nvidia has released a security update, fixing eight CVE flaws in its Windows and Linux graphics display drivers.

Naked Security

December 05, 2018

Kubernetes cloud computing bug could rain data for attackers

Kubernetes, a tool that powers much modern native cloud infrastructure, just got its first big security bug - and it’s a mammoth one.

Naked Security