Dec 19, 2024 · The transition to Rust has led to a significant drop in memory safety bugs in Android over the past five years, and similar improvements are expected in Chrome as well, since Google will be transitioning the browser to Rust too.. Related: Google Pays $55,000 for High-Severity Chrome Browser Bug Related: Five Eyes Agencies Publish Guidance on Eliminating …

SecurityWeek provides cybersecurity news and information to global enterprises, with expert insights & analysis for IT security professionals

Oct 7, 2024 · The China-linked threat group known as Salt Typhoon has hacked into the networks of several major broadband providers in the United States, potentially compromising wiretap systems, according to The Wall Street Journal.

3 days ago · Daily Briefing Newsletter. Subscribe to the SecurityWeek Email Briefing to stay informed on the latest cybersecurity news, threats, and expert insights.

Dec 4, 2024 · Google on Tuesday announced patches for 14 high-severity vulnerabilities as part of Android’s December 2024 security update, including a remote code execution flaw in the System component.

Dec 11, 2024 · In the new macOS Sequoia 15.2 rollout, Apple patched dozens of operation system flaws and called attention to a bug in IOMobileFrameBuffer that allows arbitrary code execution attacks in DCP firmware.. The company also shipped security-themed updates for watchOS, tvOS and visionOS. Related: Microsoft Ships Urgent Patch for Exploited Windows …

Aug 22, 2024 · The internet giant says it handed out $95,000 in bug bounty rewards to the reporting researchers, with the highest payout – of $36,000 – going to an anonymous researcher who found the use-after-free bug in Passwords (CVE-2024-7964).

Dec 13, 2024 · While these vulnerabilities may not seem important, the company admitted in such an advisory last month that CVE-2024-49035, a high-severity vulnerability in its Partner Network website, was exploited in attacks before it was patched.. Google Cloud also decided recently to assign CVE identifiers to critical vulnerabilities found in its products, even if they do not require …

Nov 21, 2024 · Security operations company Arctic Wolf started seeing attacks against customer environments on November 19. “Upon successful exploitation, we have observed threat actors attempting to transfer tools into the environment and exfiltrate config files from the compromised devices,” the company said.

Nov 14, 2024 · A September report from WSJ pointed to Salt Typhoon’s hacking into the systems of US internet service providers (ISPs).. Last week, Bloomberg reported that Chinese state-sponsored threat actor Volt Typhoon had hacked Singapore-based Singtel in preparation for the attacks against US wireless carriers. China, in the meantime, claims that Volt Typhoon is …