Apple’s iOS 7 Update Fixes 80 Security Bugs
Yesterday’s iOS 7 update brought a slew of bug fixes, 80 in total, to Apple devices.
Vulnerabilities
Facebook Android Bug Sent Users’ Photos in the Clear
A researcher has discovered a privacy bug in the Facebook Android app that enables an attacker to view and download any images that a user sends to Facebook. The problem derives from the fact that the app, along with the official Facebook Messenger app for Android, don’t send those images over HTTPS, even though the […]
Firefox 24 Patches 17 Security Vulnerabilities
The Mozilla Foundation released Firefox 24 yesterday, issuing 17 security patches for the browser, seven of which were rated critical.
Developers behind the web framework Django have pushed out a new build of the software that fixes a handful of security issues, including a denial of service vulnerability in the authentication framework.
NASDAQ took two weeks to patch a cross-site scripting vulnerability on its website discovered by a Swiss pen-testing outfit.
Apple pushed a handful of patches late last week and updated its OS X Mountain Lion to 10.8.5, improving “stability, compatibility and security” issues and fixing 30 different vulnerabilities in the operating system.
The popular cloud storage service Dropbox is reportedly undercutting the efficacy of access space layout randomization (ASLR) by failing to enable that feature within the dynamic link libraries (DLLs) it injects into other applications.
The latest iteration of the Pwn2Own hacking contest, which has run at the CanSecWest conference in Vancouver for several years, will take place at the Japanese version of the conference in November, and the targets will be the most popular mobile platforms.
WordPress has fixed a number of security vulnerabilities, including one that could lead to remote code execution on vulnerable installations. WordPress 3.6.1 is the new, updated release that contains the fixes and also includes some non-security bug fixes and stability changes.
It’s Patch Tuesday, and that means not just fixes from Microsoft, but also new updates from Adobe, which has released a number of patches for vulnerabilities in Flash, Reader, Acrobat and Shockwave.
