At least two groups of actors, one apparently Chinese, were exploiting a zero-day in Pulse Secure VPN.The exploit enabled the…
News
There’s a Severe Privilege Escalation Vulnerability in Windows RPC Protocol That Microsoft Won’t Fix
SentinelOne researchers have found what they call a “permanent zero-day” privilege escalation on Windows RPC.The discovery and initial report happened…
The “Hello” ransomware is exploiting a two-year-old vulnerability to find its way into unpatched systems.The malware uses strong encryption and…
Pulse Secure has discovered three more vulnerabilities in its VPN product, and patches are already out. The vendor is also…
Dell has fixed a vulnerability that loomed in its PCs for 12 years, and which they knew about for two.The…
Researchers found a high-severity bug in the Qualcomm chip modem communication protocol.The flaw could enable the execution of arbitrary code…
There’s a large number of public-facing VoIP/SIP devices that are easy to discover, evaluate, and target.Many of these devices are…
Microsoft has posted a detailed guide on how to respond to Exchange vulnerability exploitation.The actors are first planting a web…
Microsoft is pushing a small “Patch Tuesday” which is very important to apply nonetheless.The software giant has identified and fixed…
Tens of millions of Dell computers are vulnerable to arbitrary remote code execution flaws.The problem lies in BIOS components that…
The Chinese state introduces new software vulnerability disclosure rules in the form of a sweeping new law. The new guidelines…
MyLife from Ypsomed was found to be vulnerable to risky man-in-the-middle attacks.These attacks could result in the disclosure of sensitive…
A critical flaw has been present in systems using some HP, Xerox, and Samsung printers since 2005.The bug enables a…
One more ransomware group was confirmed to be engaging in exploiting “PrintNightmare” flaws. The actors generally follow “living off the…
The Norwegian Data Protection Authority has evaluated Facebook against the GDPR and found it incompatible.Simply put, the creator and owner…
The ‘Ninja Forms’ plugin for WordPress sites was found to be vulnerable to exploitation.The two flaws that were identified concern…
American cybersecurity agencies warn about Conti attacks being on the rise again.The most commonly exploited flaws by the group are…
An information disclosure vulnerability on Gurock TestRail could expose very sensitive files and data.The particular product is used by government…
A significant number of political appointees at four U.S. agencies are pressing for a ban on Honor.Many in the U.S.…
After what feels like forever, the UFC is finally back with its next live pay-per-view event set to take place…
Get expert insights on threats, breaches, scams, and security trends — delivered every Monday.
Most Popular
