Ten Years After Gates's Memo, Effects Still Being Felt

Ten years. That’s a really long time. Think about what you were doing 10 years ago. Can you even remember? Maybe you were in college or high school, or cripes, even grade school. Or maybe you were working in security already, trying to figure out why your network kept getting overrun by viruses a...

Steve Jobs Scams Continue

There is another Steve Jobs related scam floating around the Internet. According to Trend Micro, this one comes in the form of an email sent from a fake charity organization cleverly titled, Steve Jobs Charity Fund. The email calls on its recipients to donate money to the fund, which claims, rath...

Apple Mac OS X 'i386_set_ldt()' Privilege Escalation Vulnerability

This host is installed with Mac OS X and is prone to privilege escalation vulnerability. OpenVAS Vulnerability Test $Id: gbmacosxi386setldtprvescvuln.nasl 7015 2017-08-28 11:51:24Z teissa $ Apple Mac OS X 'i386setldt' Privilege Escalation Vulnerability Authors: Sooraj KS Copyright: Copyright c 20...

Steve Jobs Dead At 56

Outpourings of grief came from all corners of the technology world on Wednesday after Apple Computer announced that its co-founder and former CEO Steve Jobs had died of cancer at the age of 56. Apple’s Web page paid tribute to Jobs on Wednesday, as tributes poured in from across the world. Of not...

The Past, Present and Future of Software Security

Perhaps no segment of the security industry has evolved more in the last decade than the discipline of software security. At the start of the 2000s, software security was a small, arcane field that often was confused with security software. But several things happened in the early part of the...

CVE-2011-0182

The i386setldt system call in the kernel in Apple Mac OS X before 10.6.7 does not properly handle call gates, which allows local users to gain privileges via vectors involving the creation of a call gate entry...

Design/Logic Flaw

The i386setldt system call in the kernel in Apple Mac OS X before 10.6.7 does not properly handle call gates, which allows local users to gain privileges via vectors involving the creation of a call gate entry...

CVE-2011-0182

The i386setldt system call in the kernel in Apple Mac OS X before 10.6.7 does not properly handle call gates, which allows local users to gain privileges via vectors involving the creation of a call gate entry...

CVE-2011-0182

CVE-2011-0182 affects Apple macOS X kernels prior to 10.6.7, where the i386_set_ldt system call mishandles call gates. The root cause is improper handling of call gate entries, enabling a local attacker to escalate privileges by crafting a malicious call gate entry. The vulnerability yields a loc...

Lolz ! I've won three million Euros from Bill Gates !

Excuse me for typing breathlessly, faithful Naked Security reader, but I have some incredible news to share. I have just been informed that I have won three million Euros from none other than the Bill Gates Foundation! I had no idea that the Bill and Melinda Gates Foundation, which normally fight...

Unfixed XSS vulnerability at gatesofandaron.com

Security researcher dick, has submitted on 05/11/2010 a cross-site-scripting XSS vulnerability affecting gatesofandaron.com, which at the time of submission ranked 799979 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/01/2012. It is current...

Military to Create Cyber Command Unit

From The New York Times Thom Shanker Defense Secretary Robert M. Gates on Tuesday ordered the creation of the military’s first headquarters designed to coordinate Pentagon efforts in the emerging battlefield of cyberspace and computer-network security, officials said. Read the full story...

Unfixed XSS vulnerability at www.billgatesisdead.com

Security researcher Fugitif, has submitted on 18/10/2007 a cross-site-scripting XSS vulnerability affecting www.billgatesisdead.com, which at the time of submission ranked 851113 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 28/10/2007. It is...

BSD i386_set_ldt syscall does not appropriately validate call gate targets

Overview There are a set of kernel interfaces called "call gates" which are code primitives used to build system-level calls into an operating system's kernel. A subset of these "calls gates" may be able to be manipulated on some operating systems which use improper privilege checking when...

CVE-2026-48760: HtmlSanitizer URL Parser Deny Gates Underinclusive: Percent-Encoded BiDi Marks and Unicode Whitespace Bypass Visual-Spoofing Defense

More info at https://symfony.com/cve-2026-48760...