Comment éviter l' #aCropalypse :
https://blog.trailofbits.com/2023/03/30/acropalypse-polytracker-blind-spots/

Update your Windows now to avoid the Acropalypse vulnerability

https://www.foxnews.com/tech/update-your-windows-now-avoid-acropalypse-vulnerability

#windows #microsoft #acropalypse #technology #security

Spent the last several days deleting most old posts from my mothballed mastodon.social account, spurred by the #aCropalypse. Was not fun: had to disable the account redirect to my current account, then manually delete affected posts, rate-limited to 30 at a time. (And this is on an account that had been auto-deleting most posts anyway; would have been a nightmare otherwise.)

Microsoft assigns CVE to Snipping Tool bug, pushes patch to Store - Microsoft says "successful exploitation requires uncommon user interaction", but it's the... https://nakedsecurity.sophos.com/2023/03/27/microsoft-assigns-cve-to-snipping-tool-bug-pushes-patch-to-store/ #cve-2023-28303 #acropalypse #microsoft #dataloss

#Microsoft korrigiert "#Acropalypse"-Fehler im Windows Snipping-Tool | heise online https://www.heise.de/news/Microsoft-korrigiert-Acropalypse-Fehler-im-Windows-Snipping-Tool-8072177.html #Patchday

After rolling out an update to Windows Insiders last week, Microsoft has now released a security patch for all Windows 10 & 11 users that patches the aCropalypse vulnerability in the Snipping Tool. https://www.bleepingcomputer.com/news/microsoft/microsoft-pushes-oob-security-updates-for-windows-snipping-tool-flaw/

#Windows #Microsoft #security #privacy #acropalypse #SnippingTool #screenshots

How to Install aCropalypse Screenshot Patch in Windows 10/11?. 💻⬇️ #Windows #aCropalypse #Google #Windows11
Using the Inbuilt Update Option in Settings, Using Microsoft Store. https://www.androidinfotech.com/install-acropalypse-screenshot-patch-windows/?utm_source=dlvr.it&utm_medium=mastodon

Seit Freitagabend rollt Microsoft über den WindowsStore Patches für die Sicherheitslücke "aCropalypse" aus. Updaten! Wie: MicrosoftStore öffnen -> Bibliothek -> Updates abrufen -> App „Ausschneiden und skizzieren“ aktualisieren.

#Microsoft #aCropalypse #windows #win10 #win11

#Microsoft released an emergency security update for the #Windows10 and #Windows11 Snipping tool to fix the #Acropalypse #privacy vulnerability.

https://www.bleepingcomputer.com/news/microsoft/microsoft-pushes-oob-security-updates-for-windows-snipping-tool-flaw/

Turns out not just the Google Pixel phones were affected by the #acropalypse bug, where cropped screenshots could be recovered to almost-fullscreen versions.

Windows(!) was affected too. Win 11 seems to have a fix now, Win 10 not yet.

https://www.bleepingcomputer.com/news/microsoft/microsoft-fixes-acropalypse-privacy-bug-in-windows-11-snipping-tool/

#Verpasstodon

Windows Snipping-Tool anfällig für "Acropalypse"

Anfang der Woche wurde eine "Acropalypse" genannte Lücke im Screenshot-Tool von Google Pixel-Phones bekannt. Das Windows 11 Snipping-Tool verhält sich ebenso.

https://www.heise.de/news/Windows-Snipping-Tool-anfaellig-fuer-Acropalypse-7619561.html?wt_mc=sm.red.ho.mastodon.mastodon.md_beitraege.md_beitraege

#Acropalypse #Security #Sicherheitslücken #SnippingTool #Windows11 #WindowsSnippingTool

Unpatched bug can be exploited with modified versions of the #Android scripts.

Earlier this week, programmer and "accidental security researcher" Simon Aarons disclosed a bug in #Google's Markup screenshot editing tool for its Pixel phones. Dubbed #acropalypse, the bug allows content you've cropped out of your Android screenshot to be partially recovered, which can be a problem if you've cropped out sensitive information.

#InfoSec
https://arstechnica.com/information-technology/2023/03/windows-10-and-11-get-their-own-version-of-the-acropalypse-screenshot-bug/

This Week in Security: USB Boom! Acropalypse, and a Bitcoin Heist https://hackaday.com/2023/03/24/this-week-in-security-usb-boom-acropalypse-and-a-bitcoin-heist/ #ThisWeekinSecurity #HackadayColumns #SecurityHacks #typosquatting #Acropalypse #News #usb

This Week in Security: USB Boom! Acropalypse, and a Bitcoin Heist - We’ve covered a lot of sketchy USB devices over the years. And surely you know by ... - https://hackaday.com/2023/03/24/this-week-in-security-usb-boom-acropalypse-and-a-bitcoin-heist/ #thisweekinsecurity #hackadaycolumns #securityhacks #typosquatting #acropalypse #news #usb

@bsmaalders @cks writing a temp file and renaming it also avoids the failure-to-truncate issues found in screenshot cropping tools recently (#aCropalypse), but as some folks at work recently discovered, you need to be sure to fsync() before the rename, or a failure at the wrong moment can leave you with a zero-length file instead of the old one as the directory metadata can get written before the file contents data on ZFS.

Microsoft has released an updated version of the Windows 11 Snipping Tool that fixes the aCropalypse vulnerability that affected cropped screenshots, allowing you to recover the full image. Available for Win11 Insiders only so far. https://www.bleepingcomputer.com/news/microsoft/microsoft-fixes-acropalypse-privacy-bug-in-windows-11-snipping-tool/

#privacy #Windows11 #Microsoft #SnippingTool #aCropalypse

S3 Ep127: When you chop someone out of a photo, but there they are anyway… - Listen now - latest episode. Full transcript inside. https://nakedsecurity.sophos.com/2023/03/23/s3-ep127-when-you-chop-someone-out-of-a-photo-but-there-they-are-anyway/ #cryptocurrency #vulnerability #acropalypse #cybercrime #microsoft #dataloss #podcast #google #btc

تحذير من خبراء ‫#أمن_المعلومات‬ من  ‫#هفوات‬ برمجية في هاتف ‫#غوغل‬ ‫#بيكسل‬"و في ‫#ويندوز11‬ تتيح استعادة معلومات حساسة من الصور المحررة بأدوات القطع في نظام "ويندوز11 "و نظام تشغيل ‫#أندرويد‬
لهاتف "بيكسل". الفاصيل 👇 مع تحيات ‫#نايلةالصليبي‬
#Acropalypse
#pixel
#windows11
https://mc-d.co/1pW0
‏‪#

Exploit name approval post.

#Acropalypse

https://arstechnica.com/information-technology/2023/03/windows-10-and-11-get-their-own-version-of-the-acropalypse-screenshot-bug/

Käsittämätön moka, sekä Googlelta että Microsoftilta.

Sekä Googlen Pixel -puhelimista että Windows 11 on löytynyt ongelma, jossa niiden oletusarvoiset kuvienkäsittelyyn tarkoitetut sovellukset jättävät alkuperäisen kuvan mukaan muokatun kuvan tiedostoon.

Eli jos rajaat tai suttaat vaikkapa ruutukaappauksesta arkaluonteisia asioita ja lähetät kuvan eteenpäin, tiedostosta löytyy myös sensuroimaton kuva.

https://fin.afterdawn.com/uutiset/2023/03/22/acropalypse-windows-google-pixel-aukko

#tietoturva #uutiset #teknologia #googlepixel #acropalypse