API abuse possibilities in AWS enable actors to perform account enumeration.This is not as critical for AWS security as it…
News
A vulnerabilities database logging data for the past decade gives an idea of how software development and maintenance work.Linux and…
A large number of “Ingenico” Telium 2 POS terminals could be vulnerable to severe attacks.Researchers have figured out numerous ways…
Microsoft’s last “Tuesday Patch” of the year is a bit smaller than usual, but essential nonetheless.There are several RCE fixes…
A large number of networking devices from Zyxel are vulnerable to remote exploitation.Anyone can ssh into port 443 using cleartext…
Microsoft has released the first patch of the year, and it’s a comprehensive set of fixes.One noteworthy flaw is an…
Half a million records of high-ranking individuals from around the world are freely shared on dark web forums.The exposure is…
Highly sophisticated actors have managed to infiltrate SonicWall using zero-days against its own products.The firm has detected the activity and…
‘SaferVPN’ is vulnerable to a nasty flaw that it failed to address even after three months.The flaw is now public…
Kindle devices using outdated firmware are vulnerable to root RCE by MOBI files arriving via email.The attack called “KindleDrip” involves…
Microsoft has released this month’s patch for Windows and other products, addressing 56 flaws.The firm focuses on fixing three RCEs…
India’s NCIIPC was found to be plagued by numerous vulnerabilities by white-hat hackers.The group broke into NCIIPC’s server and accessed…
SHAREit is vulnerable to several RCEs and information disclosure flaws, but the developer isn’t fixing them.Researchers have created and publicly…
Microsoft says there is still a large number of unpatched systems out there, calling admins to update.Malicious actors have been…
A fresh Mirai variant adds nine more exploits in its galore of targeted vulnerabilities.The authors of Mirai incorporated some of…
Microsoft is now pushing an Exchange mitigation through a Defender security update.The tool will automatically scan for vulnerable servers, change…
A new CISA and FBI advisory informs about an undefined APT group targeting FortiOS VPN flaws.The three vulnerabilities mentioned in…
Researchers collected observations from hundreds of exploit attempts against SAP and have alarming results to report. Actors can develop fully-working…
Microsoft has squashed 114 critical and important bugs this month.There are four fixes for flaws concerning the Exchange Server product.The…
A large number of sites using various ‘Elementor’ plugins are vulnerable to XSS flaws.The attacks aren’t large-scale but can cause…
Get expert insights on threats, breaches, scams, and security trends — delivered every Saturday.
Most Popular
