Jeremiah Grossman on the Aviator Browser
Dennis Fisher talks with Jeremiah Grossman of WhiteHat Security about the company’s new Aviator browser, which employees have used for years, but the company just released as a public project.
Dennis Fisher
About
Dennis Fisher is a journalist with more than 13 years of experience covering information security.
Scan Shows 65% of ReadyNAS Boxes on Web Vulnerable to Critical Bug
It’s been known for some time now–several months, in fact–that there is a critical, remotely exploitable vulnerability in some of Netgear’s ReadyNAS storage boxes, and a patch has been available since July. However, many of the boxes exposed to the Web are still vulnerable, and a recent scan by HD Moore of Rapid7 found that […]
Some Netgear Routers Open to Remote Authentication Bypass, Command Injection
There is a vulnerability in some Netgear wireless routers that allows a remote attacker to completely compromise a device and gain root privileges. The bug is trivially exploitable and the researcher who discovered it has posted a proof-of-concept exploit. The vulnerability is a command-injection flaw that, when combined with a separate authentication-bypass bug that the […]
The EFF, which has consistently criticized the NSA’s mass metadata and Internet data collection, said that it appears a bill aimed at curtailing surveillance would still ensure the continued collection of Americans’ records.
Bugs in the Emergency Alert System, including one that can enable an attacker to send out a fake alert, still exist in the software, even after the manufacturers were notified and apparently updated it.
Google and Arbor Networks are collaborating on a project that shows exactly how large and damaging some DDoS attacks are, and who’s attacking who at any given moment.
A security researcher discovered a simple vulnerability in Verizon Wireless’s Web-based customer portal that enabled anyone who knows a subscriber’s phone number to download that user’s SMS message history, including the numbers of the people he communicated with.
Dennis Fisher and Mike Mimoso discuss the big stories of the last couple of weeks, including the grassroots effort to audit the TrueCrypt source code, the Apple iMessage security model and Yahoo enabling SSL by default.
VMware has released a slew of patches that fix vulnerabilities in a number of its products, including vCenter Server, vCenter Server Appliance, vSphere Update Manager, ESX and ESXi. Some of the flaws can lead to authentication bypass or denial of service on affected products. The most serious vulnerability is a bug in vCenter Server 5.0 and […]
The Apple iMessage protocol has been shrouded in secrecy for years now, but a pair of security researchers have reverse-engineered the protocol and found that Apple controls the encryption key infrastructure for the system and therefore has the ability to read users’ text messages–or decrypt them and hand them over at the order of a […]
