Patch/Configuration Management, Vulnerability Management

Google releases Chrome 7 stable channel update

October 21, 2010

Google on Tuesday released a “stable channel” version of its Chrome 7 web browser, with fixes for a number of vulnerabilities. Version 7.0.517.41 for Windows, Mac and Linux includes fixes for at least 11 flaws, which could allow an attacker to execute arbitrary code, cause a denial-of-service, conduct URL spoofing or bypass security restrictions, according to an advisory from the US-CERT. The one critical flaw listed in the bunch could cause a browser crash due to an issue involving the form auto-fill capability. Of the remaining flaws, five were rated “high,” three were listed “medium” and one “low.” — AM

Angela Moscaritolo

concept of leaky software, data with a tap sticking out.3d illustration

Patch/Configuration Management

Misconfiguration exposes over Assist Security data

SC StaffJanuary 17, 2025

Included in the data exposed by the server were personally identifiable information, job application forms, Security Industry Authority cards, payroll details, TrustID validated documents, and invoices from up to two decades ago, according to independent security researcher JayeLTee.

Cryptocurrency with blurred city abstract lights background

Threat Intelligence

Transaction simulation spoofing attack targets cryptocurrency wallets

SC StaffJanuary 16, 2025

A new attack method dubbed transaction simulation spoofing has emerged as a significant threat to cryptocurrency users with its ability to let malicious actors exploit a key security feature in modern Web3 wallets.