Elderly routers that can no longer receive firmware updates posed security risk to millions of people, consumer group Which? warns
News flaws
Oversight Board Again Flags Huawei Security Concerns
British security officials have again raised concerns about Huawei equipment and said only 'limited assurance' could be given to long-term use of the kit
Apple Fixed Tracking Flaws In Safari, But Google Director Disagrees
Google identified multiple privacy flaws in Apple's Safari browser, which the iPad maker said it has fixed, but a Google director says it hasn't
Google Project Zero Changes Controversial Disclosure Policy
Google security researchers are to change their rapid disclosure of security flaws – a policy that has angered many tech firms over the years
Nvidia Patches High-Risk Flaws In Windows Display Drivers
Bugs in GeForce, Quadro, NVS, and Tesla drivers could allow local code execution, denial of service or escalation fo security preferences
Google Reveals Multiple Remote iPhone Flaws
Bugs discovered by Google's Project Zero can be exploited with no user interaction to execute malicious code - with one flaw still remaining to be fixed
Cisco Warns Of Flaws In Data Centre Kit
Cisco warns of two critical flaws affecting its equipment commonly used in data centres
Companies Found Vulnerable To Common Unpatched Flaws
Penetration tests find most firms vulnerable via multiple vectors, including well-known security bugs and perimeter Wi-Fi weaknesses
Decades-Old Flaws Leave SCP Clients Vulnerable To Attack
The bugs in Secure Copy Protocol could allow a malicious server to manipulate data on a user's system – and so far only one client has been patched
Lab Finds More Than A Dozen Security Faults In BMW Cars
The bugs could be exploited to display false messages to a driver while the car is in motion, says Tencent's Keen Security Lab
PGP Encrypted Emails At Risk From ‘eFail’ Attacks
Unpatched bugs could allow attackers to decode PGP-encrypted emails - even those that are years old
Patch Tuesday: Meltdown, Spectre Fixes Could Impact AV Systems
January's Patch Tuesday carries warnings for Meltdown & Spectre
Patch Tuesday: Microsoft’s Last Security Update Of 2017 Targets Browsers
Web browser vulnerabilities receive the most attention from Microsoft in its pre Christmas update
Microsoft ‘Did Not Disclose 2013 Breach Of Bug Database’
In the incident, which Microsoft described at the time as limited, hackers reportedly accessed the company's internal database of unfixed software flaws
Patch Tuesday: Desktop Focus As Microsoft Tackles Office And Edge Flaws
Patch Tuesday: Admin tasks return to usual following recent Black Hat security conference, with patches for Office and browser flaws
Kaspersky Lab Creates Bug Bounty Program
Claims to be first time a security vendor has offered rewards for disclosures of vulnerabilities with its products
Stagefright Poses Serious Risks One Year After It First Surfaced
ANALYSIS: One year after the Stagefright Android flaw was first reported, its effects are widespread. More than 100 related flaws have emerged and hundreds of millions of users remain at risk
Patch Tuesday: Routine For Microsoft, Adobe Is More Pressing
Routine fixes for Office and web browsers, but no flaws are being actively exploited in the wild
Codified Security Warns Of Ongoing TalkTalk Vulnerabilities
Researchers uncover serious ongoing flaws with TalkTalk and warn that customers are still at risk
Seagate Hard Drives Shipped With Security Flaw
Wireless hard drives from Seagate vulnerable to attack due to default password vulnerability, researchers discover
Patch Tuesday Delivers Critical Repairs To Office, Windows
Microsoft releases large security update, reflecting the growing volume of patches from all vendors in 2015
Microsoft Patch Analysis Shows Growing Vulnerability Fixes
Microsoft patched more Common Vulnerability Exposures in 2014 than any other year, but number of critical fixes falls
‘Backdoors’ Uncovered In Barracuda Networks Security Gear
Researcher says backdoors remain open in many Barracuda boxes
Two More Java Flaws Emerge
Java security problems just won't go away for Oracle
How iPhones Are Being Turned Into Nasty Spyphones
Exclusive: Data shows spy software is hitting iOS more than other platforms, as researchers fret about a false sense of security around Apple's massively popular operating system
Exploit Merchant Vupen Plots London Base
Exclusive: Vupen CEO says business is coming to London as the controversial exploit-selling market continues to expand
Tesco Slammed For ‘Ignoring’ Security Failures
Tesco not living by 'every little helps' motto as researcher claims it is guilty of numerous security sins
Apple Applauded For QuickTime Patching
Apple patches 17 vulnerabilities in QuickTime, getting by with a little help from its friends
Adobe Backtracks On Patching ‘PR Disaster’
Adobe has promised it will patch a flaw in Creative Studio CS5. Previously said users had to pay for an upgrade to get security
Malicious Attacks Spike As Flaws Fall In 2011
Vulnerabilities fall but cybercriminals take advantage of simple hacking tools and poor company security practices