Multiple vulnerabilities have been discovered in Google Chrome, the most severe of which could allow for arbitrary code execution. Successful exploitation of the most severe of these vulnerabilities could allow an attacker to execute arbitrary code in the context of the browser. …

Get the latest update from Apple? Worried you’re getting tracked thanks to their new API? https://developer.apple.com/documentation/exposurenotification/ Well, it comes disabled to begin with, but you might want to always make sure. Step 1 Navigate to Settings and click on `Privacy`:

Before the macOS update 10.15.1 or “Catalina”, disabling the web camera on a Mac was pretty straightforward. Disable SIP, change some perms or delete some files/folders, reboot and enable SIP again. Now, it’s a little more complex. When you upgraded to Catalina, it created an entirely new read-only volume where…

Recently, Google notified one of our business admins to update our business listing on Google. When they went to update it, it popped up a questionnaire about COVID related updates to your business. Seemingly to help the public know what rules your business had in place. Generally pretty helpful (especially…

According to the National Science Foundation, the White House Office of Science and Technology Policy and NSF are spearheading the National Q-12 Education Partnership with industry and academia to provide training and tools to students for development of the future quantum workforce. This initiative expands quantum education to students in middle and high school across the country. NSF expands quantum education to students nationwide in collaboration with industry and academic leadersNational Science Foundation — Where Discoveries BeginNational Science Foundation — Where Discoveries BeginNational Science FoundationResearch.gov [https://www.nsf.gov/news/special_reports/announcements/080520.jsp]

The NSA has released guidance and a list of Multi-Factor Authentication (MFA) providers and their associated Authenticator Assurance Levels (AAL’s). This comes as a response to government workers who use Personal Identity Verification (PIV) cards normally to authenticate, and cannot due to working from home. https://media.defense.gov/2020/Sep/22/2002502665/-1/-1/0/CSI_MULTIFACTOR_AUTHENTICATION_SOLUTIONS_UOO17091520.PDF NSA MFA DevicesThis comes on the heels of NISTs update to SP 800–63–3 “Digital Identity Guidelines”. [https://pages.nist.gov/800-63-3/] While this is targeted to the government and industry partners, it is ideal for civilian organization to consider when implementing a MFA or 2FA. In particular, the NIST special publication provides clear and concise guidance on selecting a provider based risk levels and requirements. For example, they have the below diagram which helps users select the appropriate Identity Assurance Levels (IAL): Selecting IAL

In case you have noticed, Twitter has become dumb. And that is putting it nicely. And if the unfettered bias of the Twitter staff and their woke mob allegiance (yes, we’re calling it as it is) wasn’t enough, their [lack of] privacy is worse. See EFF if you need some…

We’ve seen several promotions for this app from reputable sources, so we wanted to come out and clarify some things about the app. While it’s not a “scam” per se, it is rather misleading and you have to read the fine print closely. There’s a few given red flags: 🚩 You are required to connect your bank to set up Now…

Back in May, Sr. Researcher Ehab Hussein if IOActive, found an exploit on the GE Reason RT clocks which allows for sensitive data exposure and arbitrary code execution. Yesterday, CERT released the advisory on it, and it maintained a CVSS of 9.6. GE Grid Solutions Reason RT Clocks | CISA1…