22 May 2019

SECURITY NEWS THIS WEEK: OH GREAT, GOOGLE TRACKS WHAT YOU BUY ONLINE WITH GMAIL


THE WEEK STARTED out with a bang, or several of them really. Remember Meltdown and Spectre, the vulnerabilities that affected basically every Intel processor from the last decade? There’s a related attack called ZombieLoad—yes, ZombieLoad—with similarly broad and bad impact. Serious stuff! But honestly not even the worst disclosure of the week.

That distinction probably goes to Cisco. Researchers at security firm Red Balloon found that they could hack the company’s ubiquitous enterprise router, meaning they could listen in on whatever traffic goes to and from those networks. Cisco then acknowledged that dozens of its products were susceptible to the attack, likely comprising millions of devices, and that a fix would require an on-site visit.

No comments: