Oct. 4, 2023, 4:31 a.m. | Security Now

Security Now www.youtube.com

• Exim email server ignored ZDI's responsible disclosure of critical remote code execution flaws for over a year, putting millions of servers at risk.
• Malicious ads are appearing in Bing Chat responses, promoting fake sites distributing malware.
• Windows 11 now natively supports passkeys, though browser support may make this redundant.
• Researchers exploit WiFi beamforming side-channel to potentially reveal keystrokes, but practicality is limited.
• The ECH TLS extension encrypts the ClientHello packet to hide SNI data.
• …

ads bing bing chat chat code code execution critical disclosure email email server exim exposed fake flaws malicious malicious ads malware passkeys remote code remote code execution responsible responsible disclosure risk server servers windows windows 11 zdi

Information Security Engineers

@ D. E. Shaw Research | New York City

Technology Security Analyst

@ Halton Region | Oakville, Ontario, Canada

Senior Cyber Security Analyst

@ Valley Water | San Jose, CA

Senior - Penetration Tester

@ Deloitte | Madrid, España

Associate Cyber Incident Responder

@ Highmark Health | PA, Working at Home - Pennsylvania

Senior Insider Threat Analyst

@ IT Concepts Inc. | Woodlawn, Maryland, United States