‘SaferVPN’ is vulnerable to a nasty flaw that it failed to address even after three months.The flaw is now public…
News
Microsoft has released this month’s patch for Windows and other products, addressing 56 flaws.The firm focuses on fixing three RCEs…
India’s NCIIPC was found to be plagued by numerous vulnerabilities by white-hat hackers.The group broke into NCIIPC’s server and accessed…
SHAREit is vulnerable to several RCEs and information disclosure flaws, but the developer isn’t fixing them.Researchers have created and publicly…
Microsoft says there is still a large number of unpatched systems out there, calling admins to update.Malicious actors have been…
A fresh Mirai variant adds nine more exploits in its galore of targeted vulnerabilities.The authors of Mirai incorporated some of…
Microsoft is now pushing an Exchange mitigation through a Defender security update.The tool will automatically scan for vulnerable servers, change…
A new CISA and FBI advisory informs about an undefined APT group targeting FortiOS VPN flaws.The three vulnerabilities mentioned in…
Researchers collected observations from hundreds of exploit attempts against SAP and have alarming results to report. Actors can develop fully-working…
Microsoft has squashed 114 critical and important bugs this month.There are four fixes for flaws concerning the Exchange Server product.The…
A large number of sites using various ‘Elementor’ plugins are vulnerable to XSS flaws.The attacks aren’t large-scale but can cause…
At least two groups of actors, one apparently Chinese, were exploiting a zero-day in Pulse Secure VPN.The exploit enabled the…
There’s a Severe Privilege Escalation Vulnerability in Windows RPC Protocol That Microsoft Won’t Fix
SentinelOne researchers have found what they call a “permanent zero-day” privilege escalation on Windows RPC.The discovery and initial report happened…
Pulse Secure has discovered three more vulnerabilities in its VPN product, and patches are already out. The vendor is also…
The “Hello” ransomware is exploiting a two-year-old vulnerability to find its way into unpatched systems.The malware uses strong encryption and…
Researchers found a high-severity bug in the Qualcomm chip modem communication protocol.The flaw could enable the execution of arbitrary code…
Dell has fixed a vulnerability that loomed in its PCs for 12 years, and which they knew about for two.The…
Microsoft has posted a detailed guide on how to respond to Exchange vulnerability exploitation.The actors are first planting a web…
There’s a large number of public-facing VoIP/SIP devices that are easy to discover, evaluate, and target.Many of these devices are…
Microsoft is pushing a small “Patch Tuesday” which is very important to apply nonetheless.The software giant has identified and fixed…
Get expert insights on threats, breaches, scams, and security trends — delivered every Monday.
Most Popular
