Temasec Exploits Archives

Category Archives: Exploits

Sophisticated Watering Hole Attack

January 20 2021 By Bruce Schneier in Exploits, Google, Security, Zero-day

Google’s Project Zero has exposed a sophisticated watering-hole attack targeting both Windows and Android:

Some of the exploits were zero-days, meaning they targeted vulnerabilities that at the time were...
Read more

Impressive iPhone Exploit

December 2 2020 By Bruce Schneier in Apple, Exploits, iPhone, Security, vulnerabilities, Zero-day

This is a scarily impressive vulnerability:

Earlier this year, Apple patched one of the most breathtaking iPhone vulnerabilities ever: a memory corruption bug in the iOS kernel that gave...
Read more

New Windows Zero-Day

November 2 2020 By Bruce Schneier in Exploits, Security, Windows, Zero-day

Google’s Project Zero has discovered and published a buffer overflow vulnerability in the Windows Kernel Cryptography Driver. The exploit doesn’t affect the cryptography, but allows attackers to escalate...

Facebook Helped Develop a Tails Exploit

June 12 2020 By Bruce Schneier in Exploits, Facebook, FBI, Security, vulnerabilities

This is a weird story: Hernandez was able to evade capture for so long because he used Tails, a version of Linux designed for users at high risk of...

Another Intel Speculative Execution Vulnerability

June 11 2020 By Bruce Schneier in Exploits, Security, vulnerabilities

Remember Spectre and Meltdown? Back in early 2018, I wrote: Spectre and Meltdown are pretty catastrophic vulnerabilities, but they only affect the confidentiality of data. Now that they --...

Six Facts about Address Space Layout Randomization on Windows

March 17 2020 By Daniel Pany in Exploits, FLARE, Homepage Carousel, Jacob Thompson, Latest Blog Posts, Threat Research, vulnerabilities, Windows

Overcoming address space layout randomization (ASLR) is a precondition of virtually all modern memory corruption vulnerabilities. Breaking ASLR is an area of active research and can ...

Six Facts about Address Space Layout Randomization on Windows

March 17 2020 By Daniel Pany in Exploits, FLARE, Homepage Carousel, Jacob Thompson, Latest Blog Posts, Security, Threat Research, vulnerabilities, Windows

Overcoming address space layout randomization (ASLR) is a precondition of virtually all modern memory corruption vulnerabilities. Breaking ASLR is an area of active research and can ...