Feed aggregator

STM32World Wiki

Hacker News - Fri, 11/13/2026 - 9:29am
Categories: Hacker News

Microsoft Struggles to Restore Email and Other Services in a Global Outage

Security Week - Fri, 11/13/2026 - 8:47am

Microsoft is trying different ways to identify the cause of the problem and get its servers back online, using “a measured approach to identify and repair affected infrastructure.”

The post Microsoft Struggles to Restore Email and Other Services in a Global Outage appeared first on SecurityWeek.

Categories: SecurityWeek

Apify Confirms Customer Data Accessed in Cyberattack

Security Week - Fri, 11/13/2026 - 7:41am

The web scraping company says an intruder accessed customer accounts and obtained personal information or stored data.

The post Apify Confirms Customer Data Accessed in Cyberattack appeared first on SecurityWeek.

Categories: SecurityWeek

SilentAir Hackers Intercept Calls, SMS From Inside Mobile Networks

Security Week - Fri, 11/13/2026 - 7:20am

Enea says SilentAir hijacked mobile network nodes to intercept calls and messages, with Taiwanese subscribers the primary targets.

The post SilentAir Hackers Intercept Calls, SMS From Inside Mobile Networks appeared first on SecurityWeek.

Categories: SecurityWeek

Google pushes second Chrome update this week

Malware Bytes Security - Fri, 11/13/2026 - 6:20am

On November 11, Google issued a security update to Chrome’s Stable channel for Windows, Mac, and Linux. The update is rolling out over the coming days and weeks.

Most users are on Chrome’s Stable channel. The desktop update brings Chrome to versions 157.0.8103.78/.79 for Windows and Mac and 157.0.8103.78 for Linux. It includes 83 security fixes, five of which are rated Critical—the highest severity level. This update came out only two days after the previous one.

How to update Chrome

The easiest option is to allow Chrome to update automatically. But you can end up lagging behind on updates if you never close your browser or if something goes wrong, such as an extension preventing the update.

If you don’t want to wait for the rollout to reach you, you can update manually. Open About Google Chrome from Chrome’s Settings or Help menu. Chrome will check for updates and download any available update. If prompted, click Relaunch to apply it.

Chrome 157.0.8103.79 is up to date

You can find an explanation of the version numbering system and step-by-step instructions in our guide: How to update Chrome on every operating system.

Technical details

Since all five Critical vulnerabilities patched in this update are use-after-free flaws, let’s have a closer look at what causes this type of vulnerability.

A use-after-free (UAF) vulnerability happens when software accesses memory after it has released that memory for reuse. The program still has a reference to the old location, but the original object is no longer valid, and something else may now occupy that space.

The leftover reference is called a “dangling pointer” and is caused by a mistake in managing how long an object remains available. One part of a program may release it while another still expects to use it. That can happen because of confused ownership, faulty error handling, or a timing issue between tasks running simultaneously.

The consequences range from crashes and corrupted data to information leaks and, in some cases, execution of attacker-controlled code. The dangerous possibility is that an attacker can influence what replaces the freed object, then trick the program into treating that replacement as legitimate data or instructions for what to do next.

That explains why UAF flaws can receive critical severity ratings. However, the label describes a class of memory-management bugs, not a guaranteed outcome: the actual impact depends on the affected component, how reliably an attacker can exploit the mistake, and the protections in place.

Stop threats before they can do any harm.

Malwarebytes Browser Guard blocks phishing pages and malicious sites automatically. Free, one click to install. Add it to your browser →

Categories: Malware Bytes

Law Enforcement Disrupts Gootloader, CastleRAT, and StealC Infrastructure

Security Week - Fri, 11/13/2026 - 5:48am

Investigators seized 235 servers and 257 domains, along with 6.4 million victim credentials as part of Operation Endgame.

The post Law Enforcement Disrupts Gootloader, CastleRAT, and StealC Infrastructure appeared first on SecurityWeek.

Categories: SecurityWeek

A faster Easter date function

Hacker News - Fri, 11/13/2026 - 4:42am

Article URL: https://www.benjoffe.com/fast-easter

Comments URL: https://news.ycombinator.com/item?id=50480808

Points: 1

# Comments: 0

Categories: Hacker News

Oee

Hacker News - Fri, 11/13/2026 - 4:41am

Comments URL: https://news.ycombinator.com/item?id=50480807

Points: 1

# Comments: 0

Categories: Hacker News

Citrix Patches 10 Critical NetScaler Vulnerabilities

Security Week - Fri, 11/13/2026 - 4:36am

Successful exploitation could lead to unexpected behavior or denial-of-service (DoS) conditions.

The post Citrix Patches 10 Critical NetScaler Vulnerabilities appeared first on SecurityWeek.

Categories: SecurityWeek

Pages