Page 88 - Project Zero News Today

Apple has added a new security system in iOS with the new update to protect iPhone and iPad users against cyber attacks via iMessages.Called BlastDoor and discovered by a security researcher with the Google Project Zero team in the iOS 14 ...

Get up from the bed, and update your iPhone right now. Apple has released its iOS 14.4 update with fixes to three critical vulnerabilities that are possibly being exploited as we speak. The iPhone maker hasn’t listed too many details about the bugs, apart from saying that they “may have been actively exploited.” One vulnerability is related to […]

Hallie Geller NYC socialite Andrew Warren, age 28, has crafted a career by capturing the allure of New York Citys young and elite. He created his own fashion brand, Just Drew, based on the image of "Gossip Girl," looking to his "it girl" friends as muses. Now, hes helping luxury brands and the socialite-influencer set build relationships through his latest venture, lifestyle agency CollXab. No one knows the allure of "Gossip Girl" as well as Andrew Warren.  The 28...

The bugs could allow criminals to listen in on private calls without the target's knowledge

Plus: Watch out for NTFS-corrupting folder, Mimecast hack, and more Share Copy In brief Last week ended with news that the venerable infosec mailing list Bugtraq was being shutdown at the end of the month. From its first posts in November 1993, Bugtraq aimed to get details of vulnerabilities, as well as defence and exploitation techniques, onto netizens radar, and discussed among admins and security researchers. Posts to this once high-volume Symantec-owned list stopped on February 22 l...

Project Zero Tuesday, January 12, 2021 Introducing the In-the-Wild Series This is part 1 of a 6-part series detailing a set of vulnerabilities found by Project Zero being exploited in the wild. To read the other parts of the series, head to the bottom of this post. At Project Zero we often refer to our goal simply as “make 0-day hard”. Members of the team approach this challenge mainly through the lens of offensive security research. And while we experiment a lot with new targets and meth...

How attackers leveraged a watering hole attack to target Windows and Android devices (Source: Google Project Zero) Googles Project Zero security team is describing its discovery last year of a complex "watering hole" operation that used four zero-day exploits to target Windows and Android mobile devices. The attack was discovered and stopped in the first quarter of 2020, but the Project Zero team, along with Google Threat Analysis Group, did not disclose details until now because it took months...

The Google logo is seen before the Google Nexus One Android smart phone unveiling at Google’s headquarters January 5, 2010 in Mountain View, California. (Robert Galbraith-Pool/Getty Images) Google’s Project Zero on Tuesday introduced a six-part series that offers an analysis of four zero-day vulnerabilities on Windows and Chrome, and known-day Android exploits it found during the team’s extensive research last year. In a blog post the team said it unc...

The vulnerability, tracked as CVE-2021-1647, is a remote code execution bug which hackers used to embed code on devices with Microsoft Defender installed, by tricking victims into opening a malicious document. This was part of 83 bug fixes released this week across a range of Microsoft products, including Windows, Azure and other services. The tech giant also released a patch for a flaw in the Windows splwow64 services. This bug, tracked as CVE-2021-1648, could be exploited to escalate privileg...

A highly sophisticated hacker targeted owners of Android and Windows devices in the first quarter of 2020, carrying out hacking via "watering hole" attacks, Google has revealed. One server targeted Windows users while the other targeted Android, said Project Zero, one of Googles security teams that has recently launched its own initiative aimed at researching new ways to detect Zero-Day exploits in the wild. "We discovered two exploit servers delivering different exploit chains via watering ...