Page 89 - Project Zero News Today

Watering-hole attacks executed by ‘experts’ exploited Chrome, Windows and Android flaws and were carried out on two servers.

By Juha Saarinen on Jan 13, 2021 11:10AM Highly sophisticated attackers used four zero-days. Googles Project Zero security researchers have published a six-part detailed analysis of a set of vulnerabilities found on two exploit servers early last year that were to be used in so-called watering hole attacks with compromised web servers used to hack targets. The report details the work of what Project Zero says is the work of "a highly sophisticated actor...

The Project Zero team (Project Zero) A non-profit aiming to end the violent deaths of Waltham Forest’s young people is set to open a new centre this month. Steve Barnabis, 48, founded the Soul Project to offer a free space for young people on Wood Street, Walthamstow, in 2006, two years after losing a teenage cousin to violent crime. In 2018, the project was evicted by the building’s new owner and reformed as Project Zero, so named for its goal to see a year where zero young people di...

Getty Images In January 2018, the entire computer industry was put on alert by two new processor vulnerabilities dubbed Meltdown and Spectre that defeated the fundamental OS security boundaries separating kernel and user space memory. The flaws stemmed from a performance feature of modern CPUs known as speculative execution and mitigating them required one of the biggest patch coordination efforts in history, involving CPU makers, device manufacturers and operating system vendors...

1 Jan 2021 Throughout 2020 the world saw multiple major hacks and breaches of schools, governments, and private companies as more systems moved online and the world adapted to the coronavirus pandemic — here are five of the most notable hacks and breaches of 2020. In 2020 many services and companies moved online as the coronavirus pandemic made it increasingly hard to operating normally. Hackers saw this as a fantastic opportunity to make some money (and cause mayhem). Soon multiple companies...

Has it been a year of hard Labour? New jobs for Jeremy Corbyns defeated MPs include the boss of a spinners mill, a top political aide, and one STILL doing constituency casework Defeat at the General Election paved the way for top executive postings for many of the Labour candidates Yet it also torpedoed the careers of rising stars who emerged from the campaign without their Commons jobs The batch of Labour candidates followed Jeremy Corbyn into the partys worst election result since 1935  Many...

Talha Saqib Well, I am Talha. An introverted fellow pursuing a degree in Computer Science from FAST-NUCES. In past, Ive been a freelance graphic designer which I still am to some extent. My deep interest in technology and reporting has made me do what I do here - cover tech news. I may look like a nerd but I am more about movies, TV shows, anime, art and especially video games. In any case, you can reach me out on Twitter: TalhaSaqib101 and Facebook: talha.saqib.9  

minute read Share this article: The LPE bug could allow an attacker to install programs; view, change, or delete data; or create new accounts with full user rights. A high-severity Windows zero-day that could lead to complete desktop takeover remains dangerous after a “fix” from Microsoft failed to adequately patch it. The local privilege-escalation bug in Windows 8.1 and Windows 10 (CVE-2020-0986) exists in the Print Spooler API. It could allow a local attacker to elevate priv...

Mozilla Foundation releases Firefox 84 browser, fixing several flaws and delivering performance gains and Apple processor support. A Mozilla Foundation update to the Firefox web browser, released Tuesday, tackles one critical vulnerability and a handful of high-severity bugs. The update, released as Firefox version 84, is also billed by Mozilla as boosting the browser’s performance and adding native support for macOS hardware running on its own Apple processors. In total, six high-severity fl...

Google Researchers Reveal ‘High-Severity’ Vulnerability In Qualcomm Adreno GPUs December 15, 2020 Google’s Project Zero (GPZ) team has disclosed a “high” severity security flaw in Qualcomm Adreno GPUs. Since the chipmaker was unable to develop an adequate patch within 90 days of receiving notification from Project Zero, Google has now publicly released the details of the bug.   For those unaware, under the revised disclosure policy, GPZ needs to wait for at least 90 day...