Vulnerabilities
The latest BIND updates patch multiple remotely exploitable vulnerabilities that could lead to denial-of-service (DoS).
Hi, what are you looking for?
SecurityWeek
Vulnerabilities
The first stable release of Chrome 110 brings 15 security fixes, including 10 for externally reported vulnerabilities.
Ransomware
It may be possible to recover some virtual machines impacted by the ESXiArgs ransomware and CISA has released a tool for the task.
Vulnerabilities
The most serious of the vulnerabilities may allow an attacker to read memory contents or launch denial-of-service exploits.
Vulnerabilities
Security researcher finds severe vulnerability providing system admin access to Toyota’s global supplier management network.
Vulnerabilities
A patch has been released for the GoAnywhere MFT zero-day vulnerability that has been exploited in attacks.
Ransomware
ESXiArgs ransomware attacks continue, with thousands of unpatched ESXi servers compromised within a few days via CVE-2021-21974.
Email Security
Microsoft is urging customers to install the latest Exchange Server updates and harden their environments to prevent malicious attacks.
Vulnerabilities
Google has awarded more than $25,000 to the researchers who reported the vulnerabilities patched with the release of the latest Chrome update.
Cloud Security
VMware vRealize Log Insight vulnerability allows an unauthenticated attacker to take full control of a target system.
Mobile & Wireless
Apple’s iOS 12.5.7 update patches CVE-2022-42856, an actively exploited vulnerability, in old iPhones and iPads.
Mobile & Wireless
Technical details published for an Arm Mali GPU flaw leading to arbitrary kernel code execution and root on Pixel 6.
Vulnerabilities
Security researchers have observed an uptick in attacks targeting CVE-2021-35394, an RCE vulnerability in Realtek Jungle SDK.
Mobile & Wireless
Apple rolled out iOS 16.3 and macOS Ventura 13.2 to cover serious security vulnerabilities.
Mobile & Wireless
Two vulnerabilities in Samsung’s Galaxy Store that could be exploited to install applications or execute JavaScript code by launching a web page.
Vulnerabilities
Several vulnerabilities have been patched in OpenText’s enterprise content management (ECM) product.
Vulnerabilities
Organizations are being compromised in attacks exploiting a recently patched Zoho ManageEngine vulnerability.
Application Security
Drupal released updates that resolve four vulnerabilities in Drupal core and three plugins.
Cybercrime
North Korean hackers working for the government stole virtual assets last year estimated to be worth between $630 million and more than $1 billion, U.N. experts...
Cyberwarfare
Cybersecurity Funding
Vulnerabilities
Funding/M&A
