Heartbleed: the OpenSSL bug that exposed 17% of HTTPS servers
In April 2014, a two-year-old bug in OpenSSL leaked private keys, passwords and session tokens from 17% of every HTTPS …
Cve 4 posts
Information security in plain English: scams, hardening and privacy — plus retrogaming, games and geek culture.
Critical 7-Zip flaw (CVE-2026-14266): how to protect yourself
A critical flaw (CVE-2026-14266) in 7-Zip allows malicious code execution via XZ archives. Here's how to update and …
SolarWinds Serv-U: CVE-2026-28318 downs a server with one POST
CISA added CVE-2026-28318 to the KEV: a POST with deflate takes down Serv-U without authentication. More than 12,000 …
YellowKey: the zero-day that bypasses BitLocker on Windows
CVE-2026-45585 grants access to BitLocker-protected drives with brief physical access. Here is how the attack works and …