53% of Connected Medical Devices Have Serious Vulnerabilities
Critical device risks in hospital environments leave hospitals and patients vulnerable to cyber attacks and data security issues.
Topic
Vulnerability
98 articles on this topic.
CISCO Recently Patched Critical Vulnerabilities
Cisco has patched a pair of vulnerabilities in its telco-focused Cisco Redundancy Configuration Manager (RCM) for Cisco StarOS software, including a critical flaw that presented a remote code execution risk.
Microsoft Defender Vulnerability Remains Unpatched
Security researchers discovered that the list of locations excluded from Microsoft Defender scan is unprotected and accessible to any local user.
New Safari Vulnerability Can Leak Recent Browsing History and Some of your Google Account Information
A new Safari vulnerability disclosed by FingerprintJS, can leak recent browsing history and some information of your logged-in Google account.
You Need to Patch Windows Remote Desktop Vulnerability Now
This vulnerability enables any standard unprivileged user connected to a remote machine via remote desktop to gain file system access to the client machines
What are Dependency Confusion Attacks?
A dependency confusion attack occurs when a software installer script is tricked into pulling malicious code file from a public repository instead of the intended file of the same name from an internal repository.
Huge Increase of WordPress Vulnerabilities in 2021
A huge increase of 142% of WordPress vulnerabilities in 2021 compare to 2020. Most of them exploitable.
A 19 Year Old Hacker Received $4,500 Bug Bounty for an Easy-To-Exploit Vulnerability
A high impact privacy bug was found in Facebook's Android application by a young bug bounty hunter. The 19 year old hacker received a $4,500 bug bounty
Penetration Testing: Create a DNS Zone Transfer Lab
DNS zone transfers use the AXFR protocol to replicate DNS records across DNS servers. If you do not protect your name servers, attackers can get information about all your hosts with AXFR.
Vulnerability vs Exploit, Do You Know The Difference?
Many news and articles keep on referring to words like vulnerability and exploits. But do you really know the difference?
A List of Tools to Help you Detect the Log4j Vulnerability
How can you detect the Log4j zero day vulnerability (known as Log4shell)? Here's a list of FREE Log4j vulnerability scanner tools.
Why Do Data Breaches Happen
We have gotten used to seeing news every day of sensitive data being exposed to unauthorized parties, but do you know why do data breaches happen?
Build a Penetration Testing Lab on a Raspberry Pi with DVWA
You can build a pentest lab on a raspberry pi with DVWA to test your skills and also learn new tricks on how to attack and/or secure web applications.
Massive Internet Scans and Log4j Exploit Attempts
Many organizations have noticed a surge in internet scans to discover vulnerable systems and exploit attempts on them.
Enhanced Automated Vulnerability Management for Cloud Workloads Announced by AWS
Newly added capabilities for the Amazon Inspector service will meet the "critical need to detect and remediate at speed" in order to secure cloud workloads. %
How to Secure Your Zoom Meetings
Zoom has around 300 million daily meeting participants! It also has security issues like "Zoom bombings" where uninvited guests may show up at meetings and another more "creepy" vulnerability which left millions of users exposed, which offered access to user's cameras and microphones.
Apple sues company known for hacking iPhones
Apple sues company known for hacking iPhones on behalf of governments. An Israeli firm called NSO Group, provided software to government agencies and law enforcement that enables them to hack iPhones and read the data on them, including messages and other communications.
Top Threats for WordPress Sites in 2020
Security firm Wordfence released a report identifying the top security vulnerabilities and threats and common attacks against wordpress websites.