Pro KRACK: Researcher discovers flaws in WPA2 authentication Key Reinstallation Attack centres on several key management vulnerabilities in WPA2 17 Oct
Pro Equifax: website vulnerability exposed 143m US consumers Massive data breach discovered on 29 July 8 Sep
Pro Attackers experiment with CVE-2017-0199 in phishing attacks Likely a test run, attacks less effective due to mistakes, say researchers 18 Aug
Pro Xen hypervisor faces third highly critical VM escape bug in 10 months The Xen paravirtualisation mode is proving to be a constant source of serious vulnerabilities 4 May
Pro Vulnerability hits Intel enterprise PCs going back 10 years Security hole involves enterprise IT management features in firmware 2 May
Pro A new tool tests for NSA spyware Script detects a related code implant and shows as many as 100,000 systems worldwide may be infected 24 Apr
Pro Oracle fixes Struts and Shadow Brokers exploits in huge patch release Quarterly Oracle patch update fixes almost 300 vulnerabilities 20 Apr
Pro Attacks exploit unpatched vulnerability in Microsoft Word Attackers have been exploiting a zero-day vulnerability in Microsoft Word since January to infect computers with malware 11 Apr
Pro Apache Struts 2 exploit used to install ransomware on servers Attackers exploit a Struts vulnerability patched in March to install the Cerber ransomware on Windows servers 7 Apr
Pro Critical Xen hypervisor flaw endangers virtualised environments Vulnerability allows attackers with access to a guest OS to read the host's memory 6 Apr
Pro Cisco and Apache issue Zero-Day flaw warnings Cisco's Talos team says Apache Struts vulnerability is being targeted in the wild 10 Mar
Pro Slack bug paved the way user access theft Problem deals with the postMessage API the chat application uses to exchange data between browser windows 6 Mar
Pro Decade-old Linux kernel root flaw found and patched Vulnerability in the kernel code supporting the Datagram Congestion Control Protocol is enabled on many Linux distributions 24 Feb
Pro Cisco reserves $125m for faulty clock component in switch gear Cisco, HPE, and Juniper have all recognised the clock technology problem 22 Feb
Pro Vulnerability in Microsoft SMBv3 protocol crashes Windows PCs Computers running fully patched Windows 10, 8.1, Server 2012, and 2016 are hit by Blue Screens when trying to connect to an infected server 6 Feb
Pro OpenSSL issues new patches as Heartbleed still lurks Latest OpenSSL update may only address moderate-severity vulnerabilities, but admins shouldn't get lax about staying current with the patches 30 Jan
Pro Adobe patches critical flaws in Flash Player, Reader and Acrobat Vast majority of the flaws could allow for remote code execution 11 Jan
Pro Critical flaw in PHPMailer library puts millions of websites at risk Vulnerability could allow attackers execute arbitrary shell commands on web servers 4 Jan
Pro VMware removes hard-coded root access key from vSphere Data Protection And a fix for stored cross-site scripting flaw in ESXi 3 Jan
Pro NTP fixes denial-of-service flaws Attackers can exploit NTP to generate large volumes of junk traffic for distributed denial-of-service attacks 25 Nov
Pro Microsoft fixes Google-divulged Windows vulnerability Bug in Windows Vista, 7, 8.1 and 10 one of many patched in current Patch Tuesday 9 Nov
Pro Admins urged to update DBs to avoid MySQL bug Privilege escalation vulnerabilities in MySQL, MariaDB, and PerconaDB 7 Nov
Pro Google clashes with Microsoft over Windows flaw disclosure Microsoft argues that Google is not cooperating on vulnerability disclosure 1 Nov
Pro Attackers use exposed LDAP servers to amplify DDoS attacks LDAP adds to the existing arsenal of DDoS reflection and amplification techniques that can generate massive attacks 27 Oct
Pro Schneider Electric PLC sim flaw leaves workstations vulnerable Attackers can send malicious code to industrial engineering software to take over workstations used to program and control PLCs 26 Oct
Pro Physical RAM attack can root Android, and more Attackers can reliably flip bits in physical memory cells in order to compromise mobile devices and computers 25 Oct
Pro Easy-to-exploit rooting flaw puts Linux machines at risk Flaw allows attackers with limited access to Linux computers to gain root privileges 24 Oct
Uncategorized Windows GDI flaw leads to PowerShell attacks APT group FruityArmor exploited Windows GDI memory handling to break out of browser sandboxes and launch PowerShell in targeted attacks 24 Oct
Pro Cisco patches critical authentication flaw in conferencing servers Hackers could exploit the issue to masquerade as legitimate users 14 Oct
Pro Cisco discloses PIX firewall, IOS software security holes IKEv1 exploit could make VPNs vulnerable, company admits 20 Sep
Pro Microsoft releases one of the biggest security updates of the year Half of the 14 security bulletins released on Patch Tuesday cover critical vulnerabilities 15 Sep
Pro MySQL zero-day exposes servers to hacking risk Unpatched vulnerability can be exploited to gain root access to servers 13 Sep
Pro Xen Project patches serious VM escape flaws Updates fix a total of four flaws, two allowing privilege escalation from guest VMs to the host 12 Sep
Pro Adobe patches critical ColdFusion app server vulnerability Flaw could be exploited to expose sensitive information 1 Sep
Pro Cisco starts patching firewalls against NSA-linked exploit Some Adaptive Security Appliance firewalls get a patch, more are expected 26 Aug
Pro Cisco, Fortinet issue patches against NSA malware Versions of Cisco PIX, ASA and Fortinet’s Fortigate firmware are affected 19 Aug
Pro Flip Feng Shui cloud VM attack exploits hardware weaknesses Sneaky attack on neighbouring cloud VMs can be executed via the infamous Rowhammer memory-altering vulnerability, say security researchers 11 Aug
Pro Security software that uses ‘code hooking’ opens doors to hackers Flaws allow hackers to easily bypass exploit mitigations in the OS and third-party apps 20 Jul
Pro Persistent XSS flaws patched in multiple WordPress plug-ins In addition to the All-in-One SEO plug-in, WordPress administrators should update others that also have a cross-site scripting flaw 18 Jul
Pro Hacked 3D printers could commit industrial sabotage Hackers could introduce defects into printed products, researchers are warning 13 Jul
Subscribers 0
Fans 0
Followers 0
Followers