Multiple Kaspersky products followed a URL checking practice that enabled individual user tracking online. The issue has been fixed through…
News
Earlier Firefox versions allowed user passwords to be copied even if a master password was set. An unauthenticated person with…
SafeBreach discovers yet another privilege escalation vulnerability on a security product. The flaw has similar grounds and method of exploitation…
Talos researchers discovered eight flaws that plague Nest IQ Indoor and the weaver binary. The attacks are not entirely easy…
Metasploit publishes a new BlueKeep exploit module that is working better than anything else we’ve had before. The team of…
Attackers probe WordPress sites for the Rich Reviews plugin and infect them with malvertising code. The plugin carries a zero-day…
A researcher discovered a BootROM exploit that works on almost all iOS devices out there. The exploit requires physical access…
Signal vulnerable to an auto-answer exploit, which requires a modified client for the caller. The attacker may activate the microphone…
Unpatched Drupal systems are being targeted by powerful malware based on a year-old flaw. The actors have several specialized PoC…
D-Link acknowledged the recent flaw in their home Wi-Fi routers, but they’re not planning to fix it. Those who have…
HP’s hardware performance monitoring tool is vulnerable to severe remote execution attacks. The tool runs on high system privileges but…
Researchers have discovered a blunder in Bonjour’s coding, which introduces a well-documented flaw. A capable group of malicious actors have…
A researcher discovered a severe flaw in the sudo program, which enables root command execution by anyone. The trick is…
Update your Chrome browser immediately, as a flaw discovered by Kaspersky Labs is under active exploitation. Not many technical details…
The first BlueKeep cyberattack is just about dropping a Monero miner. This is a work of amateurs, but things are…
Three McAfee security products have been found to be vulnerable to system-takeover attacks. The attack method is similar to what…
The November Windows patch is out, and it comes with a large number of critical fixes. All users are urged…
Unit42 presents a proof of concept code that works well in unpatched Docker installations. Admins who failed to apply the…
Symantec’s Endpoint Security belongs to the big group of security apps that don’t validate DLL files. SafeBreach researchers have developed…
Many widely used applications on the Android ecosystem are using vulnerable native libraries. The app maintainers don’t pay much attention…
Get expert insights on threats, breaches, scams, and security trends — delivered every Monday.
Most Popular
