Page 15 - Google Project Zero News Today

The bugs could allow criminals to listen in on private calls without the target's knowledge

Google Project Zero discloses spying flaws in multiple video chat apps such as Signal, JioChat, Mocha, Google Duo, and Facebook Messenger

20 January 2021, 3:45 am EST By Messaging apps are incredibly important these days as people are still unable to freely meet in person to talk, whether about personal things or any work/school-related stuff, but according to a security researcher, some of the apps we are using arent as safe as we think they are. (Photo : Pexels) Logic Bugs Found in Messaging Apps In a report by Bleeping Computer, Google Project Zero security researcher Natalia Silvanovich has found vulnerabilities in several m...

How attackers leveraged a watering hole attack to target Windows and Android devices (Source: Google Project Zero) Googles Project Zero security team is describing its discovery last year of a complex "watering hole" operation that used four zero-day exploits to target Windows and Android mobile devices. The attack was discovered and stopped in the first quarter of 2020, but the Project Zero team, along with Google Threat Analysis Group, did not disclose details until now because it took months...

Watering-hole attacks executed by ‘experts’ exploited Chrome, Windows and Android flaws and were carried out on two servers.

Critical zero-day features in first Patch Tuesday of 2021 Microsoft releases fixes for 84 bugs on the first Patch Tuesday of 2021, including a critical zero-day vulnerability in Microsoft Defender Share this item with your network: By Published: 13 Jan 2021 9:35 Microsoft has released fixes for 84 vulnerabilities, 10 of them critical, one publicly disclosed, and one zero-day that is already being exploited in the wild, in its first monthly security drop of 2021, with patches incoming for W...

1 Jan 2021 Throughout 2020 the world saw multiple major hacks and breaches of schools, governments, and private companies as more systems moved online and the world adapted to the coronavirus pandemic — here are five of the most notable hacks and breaches of 2020. In 2020 many services and companies moved online as the coronavirus pandemic made it increasingly hard to operating normally. Hackers saw this as a fantastic opportunity to make some money (and cause mayhem). Soon multiple companies...

I’m my wife’s password manager, and it has to stop Image: Getty Images / iStockphoto 2021-01-01 13:00:00 UTC My wife’s memory is so terrible, I’ve become her memory-keeper, faithfully logging her favorite burgers on my iPhone and remembering every variation of her usual password. “The usual” (not her actual password) has been my wife’s password for at least 10 years, although there’s now a second “usual” for the accounts we share, plus a handfu...

minute read Share this article: The LPE bug could allow an attacker to install programs; view, change, or delete data; or create new accounts with full user rights. A high-severity Windows zero-day that could lead to complete desktop takeover remains dangerous after a “fix” from Microsoft failed to adequately patch it. The local privilege-escalation bug in Windows 8.1 and Windows 10 (CVE-2020-0986) exists in the Print Spooler API. It could allow a local attacker to elevate priv...

Google Researchers Reveal ‘High-Severity’ Vulnerability In Qualcomm Adreno GPUs December 15, 2020 Google’s Project Zero (GPZ) team has disclosed a “high” severity security flaw in Qualcomm Adreno GPUs. Since the chipmaker was unable to develop an adequate patch within 90 days of receiving notification from Project Zero, Google has now publicly released the details of the bug.   For those unaware, under the revised disclosure policy, GPZ needs to wait for at least 90 day...