Information Security | Fallen Fish

Chrome browser has security vulnerabilities, please upgrade as soon as possible

In the middle of this month, security researchers disclosed a security vulnerability in Chrome browser, and relevant evidence shows that hackers have used this vulnerability to launch attacks. This means that all Chrome users need to upgrade to the latest version as soon as possible (upgrade to 98

February 17, 2022 one hundred and fifty-five comment

read the whole passage

New SSH function: resist side channel attacks

Hardware vulnerabilities exposed in the past two years, such as Spectre, Meltdown, Rowhammer and Rambleed, can steal keys stored in memory through guessing and side channels. Now, the popular network transmission encryption protocol SSH has introduced protection against such leaks

June 23, 2019 three hundred and twenty one

read the whole passage

High risk vulnerabilities in Microsoft Office software need to be updated in time

According to the monitoring of the National Network and Information Security Information Notification Center, Microsoft Office series office software (Word, Excel, Powerpoint, etc.) has a remote code execution vulnerability (CVE-2017-11826). At present, the vulnerability affects Off

October 13, 2017 three hundred and thirteen two

read the whole passage

WordPress REST API vulnerability has been exploited, tens of thousands of websites have been tampered with

In WordPress 4.7.0 and 4.7.1, there is an ultra vires vulnerability in the REST API. In the past two days, hackers have used REST API vulnerabilities to launch attacks on WordPress websites and edited 150 of 39000 domain names

February 11, 2017 eight hundred and nine comment

read the whole passage

Alipay responds to security vulnerabilities of acquaintance login

Recently, a netizen revealed that Alipay has found a deadly new vulnerability: strangers have a 1/5 chance to log in to your Alipay, while acquaintances can log in to your Alipay 100%, and can even change it without using the original password directly with the mobile phone number. According to netizens, the principle is as follows: log in to your mobile account - forget

January 12, 2017 four hundred and five comment

read the whole passage

The browser automatically jumps to Login Weibo page when the mobile phone accesses the web page

Recently, when visiting Cnbeta mobile station and Baidu Post Bar through mobile browser, I occasionally encountered that the access page did not open but jumped to a Sina Weibo account page with the user name of "Login Weibo", and could not return to the original access page through the browser. I also came to this notorious

February 27, 2016 2,559 one

read the whole passage

Watch out for phishing attacks against LastPass password manager: LostPass

With the development of the Internet, we have more and more registered accounts. In order to manage account passwords, more and more users have started to use password management software. LastPass is an excellent cross platform password management software. But recently, foreign researchers found a new method for LastPas

January 17, 2016 1,096 comment

read the whole passage

Enable two-step verification to prevent Apple ID theft

Recently, many domestic media reported that some users' Apple IDs were stolen, and their iPhones, iPads and Macs were locked. Most of these users used 163 and 126 mailboxes. It is recommended that users who use mailboxes 163 and 126 as Apple IDs modify Apple as soon as possible

January 11, 2016 1,303 comment

read the whole passage