Critical vulnerabilities discovered in Framework Electron, Skype, Slack, Twitch and a series of affected apps
The framework of a variety of popular desktop applications such as Skype, Slack, Signal, Twitch . appears a serious security hole. It is important that this vulnerability only affects Windows.
While waiting for the developers of affected applications to update the new version to patch, Microsoft has updated Windows Defender to protect users from the threat of attack through this vulnerability.
This is a vulnerability of Electron - framework released in 2013. Based on web technologies like JavaScript, HTML and CSS, developers use it to create popular cross-platform applications like Skype, Visual Studio Code, Brave, Basecamp, GitHub, Ghost, Signal, Slack, Twitch, WordPress .
Whether this vulnerability is dangerous depends on how the developer uses the Electron protocol. Hackers can take advantage of this vulnerability to remotely execute malicious code to steal user data, and it impacts all applications using the Electron framework with a custom protocol processor.
The protocol processing vulnerability was patched by Electron development team on Electron 1.8.2-beta.4, 1.7.11 and 1.6.16. While waiting for developers to update the application, users can temporarily handle the instructions here. Skype has patched this vulnerability in the latest version, users can update.
See more:
- The new vulnerability on Intel allows hackers to take control of your computer within 30 seconds
- Overview of vulnerabilities on Intel, AMD, ARM chips: Meltdown and Specter
- Firefox Quantum 58 has an official version for Windows, enhanced security and has many new features
You should read it
- Warning of dangerous vulnerabilities on WinRAR, users should uninstall or upgrade to a new version
- Apple Patches Zero-Day Vulnerability That Could Let iPhones, iPads, and MacBooks Get Hacked
- How to fix BlueKeep security error for Windows 2003, Windows XP, Windows 7, Windows Server 2008
- Serious security vulnerability on Intel chips
- Apple patched many zero-day bugs in iOS 15.4.1 and macOS 12.3.1 updates
- Hacker revealed the second Zero-Day, broke Windows' EoP vulnerability patch
- Microsoft has released a critical update for Windows 10, users need to update now
- Lenovo updates BIOS to patch security holes for hundreds of device models
May be interested
- 5 Best Skype Alternatives for International Callingafter more than 20 years, skype is officially shutting down, with microsoft announcing it will shut down the venerable, long-standing service on may 5, 2025.
- 13 great integration for Slack application you should not ignorethe following article will introduce you to 15 useful integrations for the slack application that you should use. let's find out soon!
- What is slack? How to use Slack?if you have heard about internet relay chat (irc), internet relay chat (irc) and slack function quite similarly. slack will be divided into small 'channels' for group discussions, ... or whatever you want. slack is considered by many people to be 'email killer', the application is a way to 'reduce' your internal emails, and forget about communicating, exchanging by email or regular chat software.
- Detecting a Skype security vulnerability that can leak user IP addressesa serious vulnerability was recently discovered in skype that has the potential to expose users' ips.
- Critical error on Skype allows hackers to execute malicious code remotelya serious flaw was discovered on microsoft's chat and call application, allowing hackers to remotely execute malicious code and cause system crashes.
- 5 best Twitch VOD downloaderswhile twitch allows creators to download their streaming content, twitch users cannot directly download content from their favorite creators. if you want to download a specific video from a content repository, you will have to use third-party tools.
- Skype: The best messaging app for Windows 10every person who has a microsoft account technically has a skype account. and hundreds of millions of people have used skype at least once or twice to make video calls, so it's strange that most people rarely use skype.
- Twitch Studio has a beta version, can be downloaded nowtwitch studio is a 'all-in-one streaming application for all streamers in the world'.
- Twitch hacked, 125GB of data including source code shared on the internetit looks like the streaming service twitch has been hacked recently. an anonymous person uploaded a 125gb torrent file containing many important twitch data on 4chan.
- Essential applications for new iPhone usersyou just bought an iphone and don't know what application to use? the following article will summarize some essential applications for new iphone users such as facebook, zalo, viber, twitter, twitch, talktv, dropbox. office ...