April 28, 2022

S3 Ep80: Ransomware news, phishing woes, NAS bugs, and a giant hole in Java [Podcast]

Latest episode - listen now!

Naked Security

April 20, 2022

Critical cryptographic Java security blunder patched – update now!

Either know the private key and use it scrupulously in your digital signature calculation.... or just send a bunch of zeros instead.

Naked Security

March 30, 2022

“VMware Spring Cloud Function” Java bug gives instant remote code execution – update now!

Easy unauthenticated remote code execution - PoC code already out

Naked Security

March 30, 2022

Second vulnerability in Spring Cloud casts shadow on popular Java framework

SophosLabs IPS signature available to detect and block issue under exploit

Security Operations

January 07, 2022

Log4Shell-like security hole found in popular Java SQL database engine H2

"It's Log4Shell, Jim, but not as we know it." How to find and fix a JNDI-based vuln in the H2 Database Engine.

Naked Security

December 29, 2021

Log4Shell vulnerability Number Four: “Much ado about something”

It's a Log4j bug, and you ought to patch it. But we don't think it's a critical crisis like the last one.

Naked Security

December 10, 2021

“Log4Shell” Java vulnerability – how to safeguard your servers

Just when you thought it was safe to relax for the weekend... a critical bug showed up in Apache's Log4j product

Naked Security

March 17, 2020

Tor browser fixes bug that allows JavaScript to run when disabled

The Tor browser has a bug that could allow JavaScript to execute on websites even when users think they’ve disabled it for maximum anonymity.

Naked Security

December 23, 2019

Serious Security: The decade-ending “Y2K bug” that wasn’t

We explain why you really need to RTFM. Even if TFM is very long and complicated and you are very experienced.

Naked Security