A researcher discovered a BootROM exploit that works on almost all iOS devices out there. The exploit requires physical access…
News
Signal vulnerable to an auto-answer exploit, which requires a modified client for the caller. The attacker may activate the microphone…
Unpatched Drupal systems are being targeted by powerful malware based on a year-old flaw. The actors have several specialized PoC…
D-Link acknowledged the recent flaw in their home Wi-Fi routers, but they’re not planning to fix it. Those who have…
HP’s hardware performance monitoring tool is vulnerable to severe remote execution attacks. The tool runs on high system privileges but…
Researchers have discovered a blunder in Bonjour’s coding, which introduces a well-documented flaw. A capable group of malicious actors have…
A researcher discovered a severe flaw in the sudo program, which enables root command execution by anyone. The trick is…
Update your Chrome browser immediately, as a flaw discovered by Kaspersky Labs is under active exploitation. Not many technical details…
The first BlueKeep cyberattack is just about dropping a Monero miner. This is a work of amateurs, but things are…
Three McAfee security products have been found to be vulnerable to system-takeover attacks. The attack method is similar to what…
The November Windows patch is out, and it comes with a large number of critical fixes. All users are urged…
Unit42 presents a proof of concept code that works well in unpatched Docker installations. Admins who failed to apply the…
Symantec’s Endpoint Security belongs to the big group of security apps that don’t validate DLL files. SafeBreach researchers have developed…
Many widely used applications on the Android ecosystem are using vulnerable native libraries. The app maintainers don’t pay much attention…
Researchers discovered alarming camera app flaws spread across the Android ecosystem. The PoC can activate the camera silently, steal media…
Truecaller could allow an attacker to inject a malicious link as a profile URL, exploiting targets on the platform. The…
Kaspersky, Autodesk, and Trend Micro in the spotlight again for severe privilege escalation vulnerabilities. Researchers from SafeBreach discovered that some…
Two popular “Ultimate Addons” plugins allow hackers to take full control of WordPress websites. The only thing that the attacker…
Researcher discovers a highly critical vulnerability that affects widely-used Citrix software products. The vulnerability takes only a minute to exploit…
NVIDIA fixes a severe vulnerability in the GeForce companion app, which leads to privilege escalation and DoS. The actor would…
Get expert insights on threats, breaches, scams, and security trends — delivered every Monday.
Most Popular
