A week in security (March 9 – March 15)

Last week on Malwarebytes Labs: Watch out for fake Malwarebytes renewal notices in your calendar Google patches two Chrome zero-days under active attack. Update now Attackers impersonate Temu in ClickFix $Temu airdrop scam Apple patches Coruna exploit kit flaws for older iOS versions This Android...

How to see your Google Search history (and delete it)

Your Google Search history provides one of the most detailed windows into your private life, and I know this because when I looked at my own search history last year, I was overwhelmed by the information buried within. Across just 18 months, Google tracked the 8,079 searches I made and the 3,050...

What does Google know about me? (Lock and Code S06E21)

This week on the Lock and Code podcast … Google is everywhere in our lives. It's reach into our data extends just as far. After investigating how much data Facebook had collected about him in his nearly 20 years with the platform, Lock and Code host David Ruiz had similar questions about the othe...

What does Google know about me? (Lock and Code S06E21)

This week on the Lock and Code podcast … Google is everywhere in our lives. It's reach into our data extends just as far. After investigating how much data Facebook had collected about him in his nearly 20 years with the platform, Lock and Code host David Ruiz had similar questions about the othe...

EUVD-2019-8672

Malware in sbrugna...

EUVD-2009-1675

Malware in sbrugna...

EUVD-2023-35088

Malicious code in bioql PyPI...

CVE-2024-56174

In Optimizely Configured Commerce before 5.2.2408, malicious payloads can be stored and subsequently executed in users' browsers under specific conditions: XSS from client-side template injection in search history...

CVE-2023-30724

Improper authentication in GallerySearchProvider of Gallery prior to version 14.5.01.2 allows attacker to access search history...

CVE-2019-19022

iTerm2 through 3.3.6 has potentially insufficient documentation about the presence of search history in com.googlecode.iterm2.plist, which might allow remote attackers to obtain sensitive information, as demonstrated by searching for the NoSyncSearchHistory string in .plist files within public Gi...

CVE-2024-56174

In Optimizely Configured Commerce before 5.2.2408, malicious payloads can be stored and subsequently executed in users' browsers under specific conditions: XSS from client-side template injection in search history...

CVE-2024-56174

In Optimizely Configured Commerce before 5.2.2408, malicious payloads can be stored and subsequently executed in users' browsers under specific conditions: XSS from client-side template injection in search history...

CVE-2024-56174

Optimizely Configured Commerce prior to 5.2.2408 is affected by a stored XSS due to client-side template injection in search history. The vulnerability arises from storing malicious payloads that may be executed in users’ browsers under certain conditions. Affected software: Optimizely Configured...

PT-2024-36731 · Optimizely · Optimizely Configured Commerce

Name of the Vulnerable Software and Affected Versions: Optimizely Configured Commerce versions prior to 5.2.2408 Description: The issue allows malicious payloads to be stored and subsequently executed in users' browsers under specific conditions. This is due to a client-side template injection in...

CVE-2023-30724

Improper authentication in GallerySearchProvider of Gallery prior to version 14.5.01.2 allows attacker to access search history...

CVE-2023-30724

Improper authentication in GallerySearchProvider of Gallery prior to version 14.5.01.2 allows attacker to access search history...

Authentication flaw

Improper authentication in GallerySearchProvider of Gallery prior to version 14.5.01.2 allows attacker to access search history...

CVE-2023-30724

Improper authentication in GallerySearchProvider of Gallery prior to version 14.5.01.2 allows attacker to access search history...

CVE-2023-30724

Improper authentication in GallerySearchProvider of Gallery prior to version 14.5.01.2 allows attacker to access search history...

PT-2023-22926 · Gallery · Gallery

Name of the Vulnerable Software and Affected Versions: Gallery versions prior to 14.5.01.2 Description: The issue is related to improper authentication in the GallerySearchProvider of Gallery, allowing an attacker to access search history. Recommendations: For versions prior to 14.5.01.2, update ...