Information Security | Fallen Fish

Google released a security patch in February to fix the 0day vulnerability in Android kernel CVE-2024-53104

Google released two sets of security patches at the beginning of February 2025 (launched on February 1 and February 5, respectively), fixing 48 security vulnerabilities, including a high-risk Android kernel 0day vulnerability - CV

February 9, 2025 one hundred and fifty-five comment

read the whole passage

Chrome browser has security vulnerabilities, please upgrade as soon as possible

In the middle of this month, security researchers disclosed a security vulnerability in Chrome browser, and relevant evidence shows that hackers have used this vulnerability to launch attacks. This means that all Chrome users need to upgrade to the latest version as soon as possible (upgrade to 98

February 17, 2022 two hundred and nine comment

read the whole passage

New SSH function: resist side channel attacks

Hardware vulnerabilities exposed in the past two years, such as Spectre, Meltdown, Rowhammer and Rambleed, can steal keys stored in memory through guessing and side channels. Now, the popular network transmission encryption protocol SSH has introduced resistance to such leaks ..

June 23, 2019 three hundred and sixty one

read the whole passage

High risk vulnerabilities in Microsoft Office software need to be updated in time

According to the monitoring of the National Network and Information Security Information Notification Center, Microsoft Office series office software (Word, Excel, Powerpoint, etc.) has a remote code execution vulnerability (CVE-2017-11826). At present, the vulnerability affects Off

October 13, 2017 three hundred and seventy-two two

read the whole passage

Wordpress REST API vulnerability has been exploited and tens of thousands of websites have been tampered with

WordPress REST API vulnerability has been exploited, tens of thousands of websites have been tampered with

In WordPress 4.7.0 and 4.7.1, there is an ultra vires vulnerability in the REST API. In the past two days, hackers have used REST API vulnerabilities to launch attacks on WordPress websites and edited 150 of 39000 domain names

February 11, 2017 eight hundred and forty-five comment

read the whole passage

Alipay responds to security vulnerabilities of acquaintance login

Recently, a netizen revealed that Alipay has found a deadly new vulnerability: strangers have a 1/5 chance to log in to your Alipay, while acquaintances can log in to your Alipay 100%, and can even change it without using the original password directly with the mobile phone number. According to netizens, the principle is as follows: log in to your mobile account - forget ..

January 12, 2017 four hundred and thirty-two comment

read the whole passage

The browser automatically jumps to Login Weibo page when the mobile phone accesses the web page

Recently, when visiting Cnbeta mobile station and Baidu Post Bar through mobile browser, I occasionally encountered that the access page did not open but jumped to a Sina Weibo account page with the user name of "Login Weibo", and could not return to the original access page through the browser. I also came to this notorious place ..

February 27, 2016 2,685 one

read the whole passage

Watch out for phishing attacks against LastPass password manager: LostPass

With the development of the Internet, we have more and more registered accounts. In order to manage account passwords, more and more users have started to use password management software. LastPass is an excellent cross platform password management software. But recently, foreign researchers found a new method for LastPas

January 17, 2016 1,115 comment

read the whole passage

Top search

information safety