A week in security (December 11 – December 17)

Last week on Malwarebytes Labs: PikaBot distributed via malicious search ads Chrome starts the countdown to the end of tracking cookies Apple to introduce new feature that makes life harder for iPhone thieves Recently-patched Apache Struts vulnerability used in worldwide attacks ALPHV ransomware...

Important: thunderbird

Issue Overview: When drawing a transparent image on top of an unknown cross-origin image, the Skia library drawImage function took a variable amount of time depending on the content of the underlying image. This resulted in potential cross-origin information exposure of image content through timi...

[DCA-00016 - Nokia E72 Keyboard Password bypass]

DCA-00016 - Nokia E72 Keyboard Password bypass Software/Hardware - Nokia E72 Vendor Product Description - Nokia E72 is a high-performance device tailor-made for seamless business and personal communication. Bug Description - The Nokia E72 keyboard lock have a delay to validate the password and on...