Remove weekly-update-87
article thumbnail

Weekly Update 87

Troy Hunt

The conference went fantastically well and, in all honesty, was the most enjoyable workshop I think I've done out of ~50 of them these last few years. NDC will be back on the Gold Coast next yet, plus of course it will be in Oslo in a few weeks' time then Sydney in September where we'll both do it all again. This week, we talk a lot about EV certs.

128
128
article thumbnail

Update Chrome now! Google patches possible drive-by vulnerability

Malwarebytes

Google has released an update to Chrome which includes seven security fixes. 87 of Chrome for Windows and Mac and 123.0.6312.86 The easiest way to update Chrome is to allow it to update automatically, which basically uses the same method as outlined below but does not require your attention. Version 123.0.6312.86/.87

Risk 111
Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Google addressed 2 Chrome zero-days demonstrated at Pwn2Own 2024

Security Affairs

Reported by wgslfuzz on 2024-03-11 “The Stable channel has been updated to 123.0.6312.86/.87 87 for Windows and Mac and 123.0.6312.86 Google addressed two zero-day vulnerabilities in the Chrome web browser that have been demonstrated during the Pwn2Own Vancouver 2024. to Linux which will roll out over the coming days/weeks.

Hacking 105
article thumbnail

RSAC insights: Software tampering escalates as bad actors take advantage of ‘dependency confusion’

The Last Watchdog

Findings released this week by ReversingLabs show 87 percent of security and technology professionals view software tampering as a new breach vector of concern, yet only 37 percent say they have a way to detect it across their software supply chain. For a full drill down on our discussion please give the accompanying podcast a listen.

Software 255
article thumbnail

10,000+ unpatched ABUS Secvest home alarms can be deactivated remotely

Security Affairs

Unfortunately, experts noticed that more than 90% of the installs are still using flawed firmware versions and have yet to install the security updates (V3.01.21) provided by the vendor. If you want to receive the weekly Security Affairs Newsletter for free subscribe here.

Firmware 112
article thumbnail

CISA alert warns of Emotet attacks on US govt entities

Security Affairs

Emotet is a modular malware, its operators could develop new Dynamic Link Libraries to update its capabilities. The infamous banking trojan is also used to deliver other malicious code, such as Trickbot and QBot trojan or ransomware such as Conti (TrickBot) or ProLock (QBot).

article thumbnail

Experts found critical authentication bypass flaw in HPE Edgeline Infrastructure Manager

Security Affairs

Users are urged to update to HPE EIM v1.22 All an attacker has to do next is login to the web application with the updated admin password “by sending a request to URL /redfish/v1/SessionService/Sessions,” Tenable explained. If you want to receive the weekly Security Affairs Newsletter for free subscribe here. Pierluigi Paganini.