Apple Releases Patches Fixing 39 Vulnerabilities
Apple releases patches fixing 39 vulnerabilities several of which could allow an attacker to execute arbitrary code on an affected device.
Vulnerabilities
80 articles
Update Chrome Now to Patch an Actively Exploited Zero-Day Vulnerability
Google has released an update for its Chrome browser that includes eleven security fixes, one of which has been reportedly exploited in the wild.
New Vulnerabilities Allow Hackers to Crash Siemens PLCs
Independent ICS security researcher Gao Jian recently discovered new vulnerabilities which can allow hackers to remotely crash Siemens PLCs.
Cisco patched 15 Vulnerabilities in Cisco Small Business RV Series Routers
Cisco published an advisory for 15 vulnerabilities in its Small Business RV Series Routers.
Developers Accidentally Turned Off CSRF Protection in Popular PHP Framework
Developers of the Symfony PHP framework have reversed a recent change that inadvertently turned off protection against CSRF attacks.
13 Known Exploited Vulnerabilities Added to CISA Catalog
CISA has added 13 new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence that threat actors are actively exploiting the vulnerabilities.
53% of Connected Medical Devices Have Serious Vulnerabilities
Critical device risks in hospital environments leave hospitals and patients vulnerable to cyber attacks and data security issues.
CISCO Recently Patched Critical Vulnerabilities
Cisco has patched a pair of vulnerabilities in its telco-focused Cisco Redundancy Configuration Manager (RCM) for Cisco StarOS software, including a critical flaw that presented a remote code execution risk.
Microsoft Defender Vulnerability Remains Unpatched
Security researchers discovered that the list of locations excluded from Microsoft Defender scan is unprotected and accessible to any local user.
New Safari Vulnerability Can Leak Recent Browsing History and Some of your Google Account Information
A new Safari vulnerability disclosed by FingerprintJS, can leak recent browsing history and some information of your logged-in Google account.
You Need to Patch Windows Remote Desktop Vulnerability Now
This vulnerability enables any standard unprivileged user connected to a remote machine via remote desktop to gain file system access to the client machines
Patch Microsoft Critical Flaw Now
Microsoft recommends that you install the latest security updates which will patch the critical flaw now.
A 19 Year Old Hacker Received $4,500 Bug Bounty for an Easy-To-Exploit Vulnerability
A high impact privacy bug was found in Facebook's Android application by a young bug bounty hunter. The 19 year old hacker received a $4,500 bug bounty
Researcher Publishes Exploit Affecting All Windows Versions
A security researcher has published a public exploit on Github that allows a low privileged user on all client and server windows operating systems, to gain administrative rights.
New Azure AD Bug Allows Attackers Brute-Force Passwords
An unpatched security weakness in Azure Active Directory might be leveraged by attackers to conduct undetected brute-force attacks, according to security researchers.
Microsoft Released Mitigations on Recently Discovered Attack Method
PetitPotam takes advantage of servers where the Active Directory Certificate Services (AD CS) is not configured with protections for NTLM
Top Threats for WordPress Sites in 2020
Security firm Wordfence released a report identifying the top security vulnerabilities and threats and common attacks against wordpress websites.
Microsoft Confirms Serious Vulnerability
Microsoft has confirmed the risk that "an attacker with physical access to a system can use Thunderspy to read and copy data even from systems