Posts

Showing posts with the label security exploit

Security Bulletin: Latest exploits makes Windows and WordPress updates particularly urgent.

Image
Nerd Cave Security News for January 16th, 2020 A Microsoft "crypto-spoofing" vulnerability allows attackers to make a malicious application look like it is from a trusted source. An "exploit" is a method of taking advantage of a vulnerability in a program, website or other system in order to make it do something it was not intended to do.  For example, a hacker could send a special command to a vulnerable website which gives them access to parts of the website they normally would not have access to. "Spoofing" is the process of making a malicious process look like a valid and trusted one.  For example, a malicious log-in web page can be made to look like a valid log-in page, thus fooling a user to enter their log-in credentials and exposing their password to hackers. Microsoft's latest "Patch Tuesday" security bulletin noted a vulnerability that would allow an attacker to submit false credentials for a malicious application ...

Security Bulletin: Ending Windows 7 support, infected phone apps, ransomeware and hacked encryption

Image
And let's start the New Year off with... Ending Windows 7 support, infected phone apps, ransomeware, hacked encryption and tons of other things I can help you with... Microsoft officially ends support for Windows 7 TODAY. Microsoft has been announcing for some time it would be ending it's support for Windows 7.  Well, TODAY IS THE DAY! (and the final one).  On the upside, Google announced that it will be extending support for it's Chrome browser in Windows 7 for another 18 months.  There are also ways to upgrade Windows 7 to Windows 10 for free.  For more information about Chrome support, click [here] .  For information about Windows 7 support and how to upgrade to Windows 10, click [here] . Google removes some 1,700 apps from the Play store. In an article on Threatpost.com it was noted that Google has remove some 1,700 Android apps from the Play store due to a malware infection called "Joker" (also called "Bread").  Actually, the post ...

Security Bulletin: Undervoltages in Intel Processors can lead to possible security flaws.

Image
"Undervoltages" in Intel Processors can lead to possible security flaws. A security bulletin released recently by Sophos disclosed a flaw in Intel Processors whereby an attacker could take advantage of the voltage control mechanism of a computer.  By slightly lowering the voltage the computer processor would start to generate small, undetectable errors in mathematical computations.  This would allow the attacker to bypass certain security features built into Intel processors.  The new exploit has been dubbed "Plundervolt" (an exploit is defined as getting a program to do something the author did NOT intend). Considerable details about the flaw (including technical jargon) are provided [ here ] at sophos.com.  Videos regarding the exploit are also available [ here ] at the official "Plundervolt" website. Intel has released a security advisory regarding the exploit [ here ].  Their recommendation is to update the BIOS of your computer.  The BIOS...