Heartbleed: the OpenSSL bug that exposed 17% of HTTPS servers
In April 2014, a two-year-old bug in OpenSSL leaked private keys, passwords and session tokens from 17% of every HTTPS …
Vulnerability 3 posts
Information security in plain English: scams, hardening and privacy — plus retrogaming, games and geek culture.
Critical 7-Zip flaw (CVE-2026-14266): how to protect yourself
A critical flaw (CVE-2026-14266) in 7-Zip allows malicious code execution via XZ archives. Here's how to update and …
CVE-2026-42897: Exchange OWA zero-day exploited with no patch
Opening an email in Exchange OWA can compromise your authenticated session. CVE-2026-42897 is active with no permanent …