Security Alerts & News
by Tymoteusz A. Góral

History
#1185 Update now: Macs and iPhones have a Stagefright-style bug!
Stagefright was one of 2015’s most newsworthy BWAINs (Bugs with an Impressive Name): a security hole, or more accurately a cluster of holes, in Android’s libstagefright multimedia software component.

Multimedia objects such as images, video and audio are often stored in files with complex formats.

That, in turn, means lots of clever programming to read them in, decode them, decompress them into memory and prepare them for display.

And, as you probably know only too well, the more complex a program gets; the more calculations it needs to do based on numbers extracted from untrusted files; the more it needs to mess around allocating and deallocating memory and shuffling data between memory buffers…

…the more likely it is that some sort of buffer overflow or integer overflow bug will show up.
Read more
#1191 IoT insecurity: Pinpointing the problems
#1190 Nearly six million fraud and cyber crimes last year, ONS says
#1189 Tinder safe dating spam uses safety to scam users out of money
#1188 Jackware: When connected cars meet ransomware
#1187 Hidden 'backdoor' in Dell security software gives hackers full access
#1186 CrypMIC ransomware wants to follow CryptXXX’s footsteps
#1185 Update now: Macs and iPhones have a Stagefright-style bug!
#1184 Facebook malware – the missing piece
History
2017: 01 02 03 04 05
2016: 01 02 03 04 05 06 07 08 09 10 11 12