April 30, 2020

“Zero-click” mobile phone attacks – and how to avoid them

What if a messaging app has to show you an unwanted message so you can decide whether you want it shown to you?

Naked Security

March 05, 2020

Google launches FuzzBench service to benchmark fuzzing tools

Google has announced FuzzBench, a free service “for painlessly evaluating fuzzers in a reproducible way.”

Naked Security

November 18, 2019

GitHub launches Security Lab to boost open source security

The idea is simple – create a global platform for reporting and fixing vulnerabilities in open source projects before they do damage.

Naked Security

November 07, 2019

Linux users warned to update libarchive to beat flaw

The bug is identified as CVE-2019-18408, a high-priority ‘use-after-free’ bug when dealing with a failed archive.

Naked Security

December 03, 2018

Faster fuzzing ferrets out 42 fresh zero-day flaws

A group of researchers has found 42 zero-day flaws in a range of software tools using a new take on an old concept - fuzzing.

Naked Security

October 23, 2017

Microsoft tears into Chrome security as patching feud continues

Everybody wins as Google and Microsoft's security one-upmanship continues

Naked Security

October 18, 2017

Is security on the verge of a fuzzing breakthrough?

Smart, efficient fuzzing could give every developer the opportunity to find bugs efficiently, during development

Naked Security

October 11, 2017

What’s the fuzz about? Microsoft unveils its latest security tool

Microsoft's got a new fuzzer... but what is fuzzing and what's behind the recent enthusiasm for it?

Naked Security

May 17, 2017

How Big Fuzzing helps find holes in open source projects

Google's beta project, OSS-Fuzz, has found 264 vulnerabilities in 47 open-source projects - so is it an idea whose time has come?

Naked Security