Displaying items by tag: NSA

A row has broken out between researchers from Google after ex-NSA hacker Patrick Wardle revealed the details of two zero-day vulnerabilities in the Mac version of Zoom that could be exploited to give the attacker root access. Neither vulnerability is remotely exploitable and can only be taken advantage of by a local attacker – someone who has physical access to the machine in question.

A Windows ransomware attack on a gas pipeline in the US, briefly detailed by the US Cyber Security and Infrastructure Agency recently, is probably the same as that reported by the US Coast Guard in 2019, the security firm Dragos claims.

Microsoft has released a patch for a vulnerability in crypt32.dll, a library used for authentication, a flaw it rates important, the second rank on its severity rating list, but which the NSA has seen fit to issue an advisory about, something the agency never does.