Page 13 - Google Project Zero News Today

Rechteausweitung in Windows: Microsoft verbockt Sicherheitsupdate Microsoft hat laut eigenen Angaben mit dem Juni Patch-Day einen Fehler behoben, der von Unbefugten zur Rechteausweitung genutzt werden konnte. Nun meldet allerdings der Forscher, der die Schwachstelle entdeckt hatte, dass die Behebung unvollständig ist. Es geht bei der Sicherheitslücke um die mögliche Umgehung von Sicherheitsfunktionen von Windows TCP/IP-Treibern, wodurch ein Angreifer in der Lage wäre, sich selbst weitere Re...

A Q&A with Sebastian Schaub, found of VPN service hide.me.

Due to several flaws with severe consequences, Google has released an update for its Chrome browser that you need to get ASAP.

The latest version of Google Chrome addresses an actively exploited zero-day vulnerability and other security flaws.

We’re much more used to security flaws now after years of being conditioned to hearing about them from various sources. Some software makers handle vulnerabilities better than others of course, but remember, software is inherently complicated and it’s being written by flawed humans so mistakes are inevitable. 

The "CVE" numbers are how computer-security pros refer to known vulnerabilities. According to Google Project Zero researcher Maddie Stone, who tweeted out the bulletin update, two of the flaws involve Qualcomm graphics processors, while the other two affect ARM Mali GPUs. At least two of the flaws permit full system takeover. Android has updated the May security with notes that 4 vulns were exploited in-the-wild. Qualcomm GPU: CVE-2021-1905, CVE-2021-1906ARM Mali GPU: CVE-2021-28663, CVE-2021-2...

Making Zero-Day Flaws Disappear Compliance Compliance Twitter Get Permission Maddie Stone, a security researcher with Google Project Zero, speaks on Friday at the AusCERT computer security conference. This year is on track to be a record one for zero-day vulnerabilities, the term for software flaws that are being actively exploited in the wild and do not have a fix. About 21 have been discovered so far, and if that pace continues, the year could end with more than 60, says Maddie Stone, a se...

Google revises Disclosure Policy to help improve patch adoption Events About If you already have an account please use the link below to sign in. If you have any problems with your access or would like to request an individual access account please contact our customer service team. Google revises Disclosure Policy to help improve patch adoption Googles Project Zero will not share technical details of the bug for 30 days if a vendor fixes the vulnerability within a 90-day deadline Google revise...

April 16th, 2021 Rapeepong Puttakumwong via Getty Images Googles Project Zero security team will wait an extra 30 days before disclosing vulnerability details so end-users have enough time to patch software, Google has announced. That means developers will still have 90 days to fix regular bugs (with a 14-day grace period if requested), but Google will wait an additional 30 days before disclosing the details publicly. For flaws being actively exploited in the wild (zero day), companies still ha...

minute read Share this article: The zero-day flaw research group has revised its disclosure of the technical details of vulnerabilities in the hopes of speeding up the release and adoption of fixes. Google Project Zero will now give organizations a 30-day grace period to patch zero-day flaws it discovers in a new disclosure policy revealed this week aimed at speeding up the time it takes for patches to be adopted. Known for discovering a number of high-profile zero days—in Googl...