bugs

A security researcher says he's found a major security flaw in the Mac's password storage tool. But he's refusing to publish the details as a protest against Apple's "bug bounty" program. Linuz Henze has produced a video showing what he calls an ... exploit of the Keychain feature in MacOS Mojave, the current edition of the operating system for Mac computers. Keychain is an application on Macs that lets users save passwords for online accounts and digital certificates so that they don't have to type them in again. Users can also open Keychain and access a full list of passwords. Normally every ... (view more)

Another file deletion bug appears to have hit Windows 10's latest update. It's raised questions about Microsoft's review process. This is a separate issue to the recent bug that deleted user documents . The new problem - which is also related to the ... October Update - affects .ZIP files. ZIP files are used to store multiple files (and sometimes backups) into a single, archived file. Archives usually offer a high compression ratio, which means files inside the archive are shrunk. This makes .ZIP files especially useful for downloading files from websites because it takes less time. Duplicate ... (view more)

Microsoft has issued three updates to fix flaws in older, unsupported versions of Windows. It's an unusual move that follows the discovery that both the National Security Agency (NSA) and outside hackers are exploiting the flaws , similar to the one ... that allowed the WannaCry Ransomware worm to spread just a few weeks ago. The updates cover both Windows and Windows Server editions going right back to XP . They'll be issued through the usual automated updates, which means people on Windows 8.1 and later shouldn't need to do anything. Those on earlier systems may need to manually ... (view more)

Microsoft has criticized Google for revealing details of what the search giant has dubbed a "critical" security flaw in Windows. The two companies dispute whether Google gave Microsoft enough time to fix the problem before going public. The ... controversy lies in the fact that Microsoft has yet to release a fix for the problem and has not even said if one exists. The bug applies to 32-bit editions of Windows and allows an unauthorized local privilege escalation. The effect is to undermine a security feature known as " sandboxing ," which is designed so that if a hacker ... (view more)

US government officials have flatly denied having any advance knowledge of the Heartbleed bug . The bug, which has already been exploited by hackers, has resulted in exposed social security numbers of the Canada Revenue Agency and other personal ... data. It's estimated that the bug affects approximately six percent of all websites world-wide. Now, it's emerged that US spies who discover security bugs are sometimes allowed to exploit them, rather than warn the public of any imminent dangers. A report by the Bloomberg news agency suggested the National Security Agency (NSA) knew about Heartbleed ... (view more)