Receiving and opening a video on your Android device could lead to an RCE scenario. People are advised to update…
News
A pen testing company released a Python proof of concept that shows how to conduct BlueKeep remote code execution. Researchers…
LibreOffice thought they’d fixed a severe code execution vulnerability, but it looks like there’s still a way. An independent reporter…
McAfee researchers have discovered a severe RCE flaw on Avaya’s H.323 firmware. The security flaw affects a wide range of…
Researchers discover severe vulnerabilities in 40 drivers from 20 hardware vendors. Microsoft doesn’t look like being in a position to…
Researchers present a novel way to perform a successful ransomware attack against DSLR cameras. The method involves the PTP functionality…
Valve fixed a Steam privilege escalation zero-day that they first deemed as “non-applicable” and “out of scope”. The hacker who…
A Google researcher has disclosed a 20-year-old bug that plagues all Windows versions since XP. The researcher demonstrated that it’s…
Trend Micro Password Manager version 5.0 is found to be plagued by a privilege escalation flaw. An attacker could use…
Multiple Kaspersky products followed a URL checking practice that enabled individual user tracking online. The issue has been fixed through…
Earlier Firefox versions allowed user passwords to be copied even if a master password was set. An unauthenticated person with…
Talos researchers discovered eight flaws that plague Nest IQ Indoor and the weaver binary. The attacks are not entirely easy…
SafeBreach discovers yet another privilege escalation vulnerability on a security product. The flaw has similar grounds and method of exploitation…
Metasploit publishes a new BlueKeep exploit module that is working better than anything else we’ve had before. The team of…
Attackers probe WordPress sites for the Rich Reviews plugin and infect them with malvertising code. The plugin carries a zero-day…
A researcher discovered a BootROM exploit that works on almost all iOS devices out there. The exploit requires physical access…
Signal vulnerable to an auto-answer exploit, which requires a modified client for the caller. The attacker may activate the microphone…
Unpatched Drupal systems are being targeted by powerful malware based on a year-old flaw. The actors have several specialized PoC…
D-Link acknowledged the recent flaw in their home Wi-Fi routers, but they’re not planning to fix it. Those who have…
Researchers have discovered a blunder in Bonjour’s coding, which introduces a well-documented flaw. A capable group of malicious actors have…
Get expert insights on threats, breaches, scams, and security trends — delivered every Saturday.
Most Popular
