Security update for chromium (important)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2021:1303-1 Rating: important References: 1190096 1190476 Cross-References: CVE-2021-30606 CVE-2021-30607 CVE-2021-30608 CVE-2021-30609 CVE-2021-30610 CVE-2021-30611 CVE-2021-30612 CVE-2021-30613 CVE-2021-30614...

Catching the big fish: Analyzing a large-scale phishing-as-a-service operation

In researching phishing attacks, we came across a campaign that used a rather high volume of newly created and unique subdomains—over 300,000 in a single run. This investigation led us down a rabbit hole as we unearthed one of the operations that enabled the campaign: a large-scale...

You Can Now Sign-in to Your Microsoft Accounts Without a Password

Microsoft on Wednesday announced a new passwordless mechanism that allows users to access their accounts without a password by using Microsoft Authenticator, Windows Hello, a security key, or a verification code sent via SMS or email. The change is expected to be rolled out in the coming weeks...

User Profile Error - The volume is too fragmented to complete this transaction in Applayer Image

"User Profile Service service failed the sign-in. User profile cannot be loaded". Error :The volume is too fragmented to complete this transaction...

A week in security (August 30 – September 5)

Last week on Malwarebytes Labs ProxyToken: another nail-biter from Microsoft Exchange Macs turn on apps signed by Symantec, treat them as malware Google Play sign-ins can be abused to track another person’s movements FTC bans SpyFone and its CEO from continuing to sell stalkerware BrakTooth...

CVE-2021-30609

Chromium: CVE-2021-30609 Use after free in Sign-In...

DEBIAN-CVE-2021-30609

Chromium: CVE-2021-30609 Use after free in Sign-In...

CVE-2021-30609

Chromium: CVE-2021-30609 Use after free in Sign-In...

CVE-2021-30609

Chromium: CVE-2021-30609 Use after free in Sign-In...

CVE-2021-30609

Chromium: CVE-2021-30609 Use after free in Sign-In...

Design/Logic Flaw

Chromium: CVE-2021-30609 Use after free in Sign-In...

UBUNTU-CVE-2021-30609

Chromium: CVE-2021-30609 Use after free in Sign-In...

CVE-2021-30609

CVE-2021-30609 is a use-after-free vulnerability in Chromium’s Sign-In code path. Connected advisories (Astra Linux, Fedora package updates) indicate Chromium/Chromium-based packages were updated to address this issue (e.g., Chromium 93.0.4577.x in Fedora updates). The available documents do not ...

CVE-2021-30609

Chromium: CVE-2021-30609 Use after free in Sign-In...

CVE-2021-30609

Chromium: CVE-2021-30609 Use after free in Sign-In...

CVE-2021-30609

Chromium: CVE-2021-30609 Use after free in Sign-In...

CVE-2021-30609

Chromium: CVE-2021-30609 Use after free in Sign-In...

CVE-2021-30609: Use After Free

Chromium: CVE-2021-30609 Use after free in Sign-In...

Chromium: CVE-2021-30609 Use after free in Sign-In

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Google Chrome Sign-In code execution vulnerability

Google Chrome is a web browser from Google, Inc. A code execution vulnerability exists in Google Chrome Sign-In. A remote attacker could use this vulnerability to execute arbitrary code on the system or cause a denial of service condition...