Fixed DRAM error makes virtually all computers vulnerable.Error from 2012 pops up again, even with new memory chips. Computer scientists from the Free University (VU) have discovered that a memory that was considered solved is still present, also in new memory chips. As a result, according to scientists, almost all laptops, smartphones and servers in the world are vulnerable to attacks. Fixed DRAM error makes virtually all computers vulnerable.

WiFi leak made billion devices vulnerable to eavesdropping.The Wi-Fi chip in over a billion devices contained a vulnerability that allowed attackers to intercept encrypted information. The leak was discovered by researchers from the security company ESET. The vulnerability has been named KR00k. The leak is in Wi-Fi chips made by Cypress Semiconductor and Broadcom. From iPhones to Wi-Fi routers. Among the affected devices are iPhones, iPads, MacBooks, Samsung Galaxy devices, Amazon Kindle eReaders, minicomputer Raspberry Pi 3 and more devices. Also Wi-Fi routers from Asus and Huawei are affected. ESET already informed the affected manufacturers some time ago. For most of the affected devices, security updates would have been released by now. For example, the vulnerabilities in Apple devices with updates were fixed in October, the company says to Ars Technica. WiFi leak made billion devices vulnerable to eavesdropping.

Many iPhones, iPads, Samsungs and routers leak via wifi chip.A vulnerability in a Broadcom chip appears to be unpatched in billions of devices. iPhones, iPads, Macs, Amazon Echos and Kindle's, Android smartphones, Raspberry PIs and routers from many brands including Asus and Huawei are found vulnerable to external attacks due to an error in the wifi chip for which a patch has been available for a long time. Many iPhones, iPads, Samsungs and routers leak via wifi chip.

Cybercrime in the Netherlands' trumps' traditional crime.Dutch citizens are more likely to be victims of cybercrime. In 2019, Dutch citizens are more likely to be affected by cybercrime, while victims of traditional crime have narrowed down. Fewer people have been affected by violence, burglary, theft and destruction last year. The increase for cybercrime and the decline for traditional crime is reported by Statistics Netherlands on the basis of its own Security Monitor plus police registration figures. Cybercrime in the Netherlands' trumps' traditional crime.

Hackers actively abuse zero-days in WordPress.More than 35 percent of websites runs on WordPress. This huge attack surface has been more attacked lately by hackers, trying to abuse bugs in plugins. Some of these vulnerabilities are zero-days, weaknesses unknown to the creators of the plugins. Hackers actively abuse zero-days in WordPress.


Dutch privacy watchdog warns of risks from smart cars.Privacy is important. This week, the Dutch AP wants to warn about the privacy sensitivities that smart cars bring. The Dutch privacy regulator Autoriteit Persoonsgegevens (AP) will warn owners of so-called smart cars about the risks and privacy issues with the data that the cars collect. According to the AP, this data can be sensitive to poor security and thus brings a number of guidelines that users can follow. Dutch privacy watchdog warns of risks from smart cars.

Discovered two new vulnerabilities in AMD CPUs from 2011 through 2019 - update.Recently, a lot of security issues have been discovered in especially Intel chips, but that does not mean that processors from, for example, AMD and ARM do not risk being subject to problems. Graz University of Technology has discovered two new security bugs around speculative execution in AMD processors launched between 2011 and 2019. Discovered two new vulnerabilities in AMD CPUs from 2011 through 2019 - update.

Serious vulnerability in Intel processors is 'unrepairable.Just as Intel has more or less controlled the vulnerabilities of recent years — either through firmware and software patches, or with new hardware revisions — the company is once again facing a serious security issue. The creature doesn't have a hip name yet, but is only known as CVE-2019-0089, a vulnerability in the absolute base of Intel processors, the Converged Security and Management Engine, and one that is said to be unpatchable. This vulnerability affects virtually all Intel's recent processors over the past five years; only the 10th generation Ice Lake processors remain protected. Serious vulnerability in Intel processors is 'unrepairable.

More than billion Android devices vulnerable to hackers: this is how you protect yourself.From research by the British watchdog Which? shows that more than a billion Android phones and tablets are unsafe. The devices are 'too old', which means that they no longer receive security updates and are therefore vulnerable to hackers and viruses. More than billion Android devices vulnerable to hackers: this is how you protect yourself.

EU recommends Telegram.The European Commission has recommended to its employees to use the messaging app Signal. In fact, the messages are encrypted end-to-end, which would make the EC's communication safer. Funny actually, Telegram is just an app that is used by many people who deal with shadowy practices - just for the same reason: that the messages cannot be bugged. According to the EC, there is another reason why employees should use Telegram: it is open source. And so everyone can check what happens under the hood. Developed by privacy activists in 2013, Signal receives the support of a non-profit foundation, which in turn receives the support of Brian Acton - the founder of WhatsApp, and the man who left the company in 2017 after he got stuck with Facebook that WhatsApp had taken over. More at Politico, and a discussion at Slashdot. politico.eu.





This does not make you happy! Cybercrime