Microsoft has released the first patch of the year, and it’s a comprehensive set of fixes.One noteworthy flaw is an…
News
A large number of networking devices from Zyxel are vulnerable to remote exploitation.Anyone can ssh into port 443 using cleartext…
Highly sophisticated actors have managed to infiltrate SonicWall using zero-days against its own products.The firm has detected the activity and…
Half a million records of high-ranking individuals from around the world are freely shared on dark web forums.The exposure is…
Kindle devices using outdated firmware are vulnerable to root RCE by MOBI files arriving via email.The attack called “KindleDrip” involves…
‘SaferVPN’ is vulnerable to a nasty flaw that it failed to address even after three months.The flaw is now public…
Microsoft has released this month’s patch for Windows and other products, addressing 56 flaws.The firm focuses on fixing three RCEs…
SHAREit is vulnerable to several RCEs and information disclosure flaws, but the developer isn’t fixing them.Researchers have created and publicly…
India’s NCIIPC was found to be plagued by numerous vulnerabilities by white-hat hackers.The group broke into NCIIPC’s server and accessed…
Microsoft says there is still a large number of unpatched systems out there, calling admins to update.Malicious actors have been…
A fresh Mirai variant adds nine more exploits in its galore of targeted vulnerabilities.The authors of Mirai incorporated some of…
Microsoft is now pushing an Exchange mitigation through a Defender security update.The tool will automatically scan for vulnerable servers, change…
A new CISA and FBI advisory informs about an undefined APT group targeting FortiOS VPN flaws.The three vulnerabilities mentioned in…
Researchers collected observations from hundreds of exploit attempts against SAP and have alarming results to report. Actors can develop fully-working…
Microsoft has squashed 114 critical and important bugs this month.There are four fixes for flaws concerning the Exchange Server product.The…
A large number of sites using various ‘Elementor’ plugins are vulnerable to XSS flaws.The attacks aren’t large-scale but can cause…
At least two groups of actors, one apparently Chinese, were exploiting a zero-day in Pulse Secure VPN.The exploit enabled the…
There’s a Severe Privilege Escalation Vulnerability in Windows RPC Protocol That Microsoft Won’t Fix
SentinelOne researchers have found what they call a “permanent zero-day” privilege escalation on Windows RPC.The discovery and initial report happened…
Pulse Secure has discovered three more vulnerabilities in its VPN product, and patches are already out. The vendor is also…
The “Hello” ransomware is exploiting a two-year-old vulnerability to find its way into unpatched systems.The malware uses strong encryption and…
Get expert insights on threats, breaches, scams, and security trends — delivered every Monday.
Most Popular
