The Naked Security podcast recently discussed the return of Little Bobby Tables, backdoors, and exploits. The episode began with a discussion of the AT command set for modems, which was first developed in 1983 and is still widely used today. The hosts then moved on to discuss the recent bug found in KeePass, a password…
Google has released a new Chrome update that includes two security patches, one of which is particularly noteworthy. Google has directly stated that an exploit for CVE-2023-3079 exists in the wild, without any of the usual vague language about being aware of reports. This means that Google is aware that criminals are actively exploiting the…
If you’re a fan of Google Chrome or Microsoft Edge, you’re probably already up to date with the latest updates. But it’s always important to double-check, as recently two zero-day remote code execution (RCE) bugs have been patched in the Chromium browser core, on which both Edge and Chrome are based. Although the details of…
Another day, another zero-day attack hitting widely deployed software from a big tech provider. Google on Friday joined the list of vendors dealing with zero-day attacks, rolling out a major Chrome Desktop update to fix a security defect that’s already been exploited in the wild. The high-severity vulnerability, tracked as CVE-2023-2033, is described as a…
This week, Google released Chrome 112 in the stable channel, which contains patches for 16 reported vulnerabilities. Out of the reported flaws, 14 were submitted by external researchers. Of these, two are ‘high severity’ issues, nine have been rated ‘medium severity’, and the remaining three are ‘low severity’. The most severe of these is a…
A fake ChatGPT Chrome browser extension has been caught hijacking Facebook accounts, according to cybersecurity firm Malwarebytes. The extension, which is advertised as a virtual assistant powered by artificial intelligence, has over 100,000 downloads and appears to be legitimate. However, once installed, it accesses the user’s Facebook account and starts sending messages with malicious links…
Google this week announced an update to Chrome 111, which comes with patches for eight vulnerabilities, including seven reported by external researchers. All seven of the externally reported issues are high-severity memory safety bugs, with four of them described as use-after-free vulnerabilities. Of the reported issues, the most important is CVE-2023-1528, a use-after-free flaw in…
