Researchers have unearthed two publicly available exploits that completely evade protections offered by Secure Boot, the industry-wide mechanism for ensuring devices load only secure operating system images during the boot-up process. Microsoft is taking action…
Cellebrite, a company that makes forensic equipment for unlocking smartphones, said it is acquiring mobile testing startup Corellium for $170 million in cash, with $20 million converted to equity at closing. The Israel-headquartered Cellebrite said…
Here’s something you may not know: Hackers can sign up for phishing-as-a-service platforms. In other words, there are businesses that put together a PhAAS software package that hackers can buy and run phishing schemes. A…
Operation Zero, a company that acquires and sells zero-days exclusively to the Russian government and local Russian companies, announced on Thursday that it’s looking for exploits for the popular messaging app Telegram, and is willing…
Two new Mac exploits discovered recently are good reminders of best practices for staying safe, such as not letting strangers access your computer, staying up to date with software updates, and getting your software from…
Normally, Secure Boot prevents the UEFI from running all subsequent files unless they bear a digital signature certifying those files are trusted by the device maker. The exploit bypasses this protection by injecting shell code…
Getty Images Critics of spyware and exploit sellers have long warned that the advanced hacking sold by commercial surveillance vendors (CSVs) represents a worldwide danger because they inevitably find their way into the hands of…
Google says it has evidence that Russian government hackers are using exploits that are “identical or strikingly similar” to those previously made by spyware makers Intellexa and NSO Group. In a blog post on Thursday,…
Tools that allow government hackers to break into iPhones and Android phones, popular software like the Chrome and Safari browsers, and chat apps like WhatsApp and iMessage, are now worth millions of dollars — and…
Getty Images Researchers have unearthed Linux malware that circulated in the wild for at least two years before being identified as a credential stealer that’s installed by the exploitation of recently patched vulnerabilities. The newly…