• Researcher exposes VirtualBox zero-day vulnerability

    5 days ago - By TechRadar

    A Russian security researcher fed up with the current state of infosec has published details about a zero-day vulnerability affecting Oracle's popular virtual machine software VirtualBox without first informing the company. Saint Petersburg-based researcher Sergey Zelenyuk discovered a chain of bugs that can allow malicious code to escape from a VirtualBox virtual machine and execute on the host operating system. Once the code has escaped out of the VirtualBox VM, it runs in the OS' limited userspace on kernel ring 3. However, Zelenyuk noted that attackers could make use of known private...
    Read more ...

     

  • Google details the latest state of Android security, and it looks great

    Google details the latest state of Android security, and it looks great

    5 days ago - By Android Central

    If you install from Google Play, your chances of being compromised are steadily approaching zero.
    In the name of transparency, Google has released another Android security report (officially, the Android Ecosystem Security Transparency Report) that details many aspects of exactly how secure different parts of the Android ecosystem are, and how often they're being exploited in the real world. The goal is of course to show that Android is very secure purely based on the numbers Google collects - and it has no qualms about showing off its data, because it looks really good.
    We hear a lot...
    Read more ...