Vulnerabilities
Patch Tuesday: Adobe patches 72 security vulnerabilities and warns that Windows and macOS users are at risk of code execution, memory leaks, and denial-of-service...
Hi, what are you looking for?
SecurityWeek
Nation-State
Apple said there's “too significant a risk” of exposing the anti-exploit work needed to fend off the very adversaries involved in the case.
Vulnerabilities
Noteworthy stories that might have slipped under the radar: a possible Adobe Reader zero-day, researchers mistakenly hijack .mobi TLD, and an exploited WhatsApp View Once...
Vulnerabilities
Apple has released a patch for Vision Pro after researchers showed how an attacker can obtain passwords typed by looking at keys.
Vulnerabilities
GitLab has released security updates to resolve multiple vulnerabilities in GitLab CE/EE, including a critical-severity pipeline execution flaw.
Vulnerabilities
Palo Alto Networks has fixed medium- and high-severity vulnerabilities in PAN-OS, Cortex XDR, ActiveMQ Content Pack, and Prisma Access Browser.
Vulnerabilities
Cisco has announced security updates that patch eight vulnerabilities in IOS XR software, including six high-severity bugs.
Vulnerabilities
SAP has released 25 security notes on August 2024 Security Patch Day, including for critical vulnerabilities in BusinessObjects and Build Apps.
Vulnerabilities
SafeBreach identified 10 vulnerabilities in Google Quick Share and devised a remote code execution chain targeting the file sharing utility for Windows.
Endpoint Security
The vulnerabilities, patched in OpenVPN 2.6.10, expose users on the Windows platform to remote code execution attacks.
Vulnerabilities
CISA is warning organizations about abuse of Cisco Smart Install feature, as Cisco is notifying customers about critical phone vulnerabilities it’s not patching.
Incident Response
CrowdStrike dismissed claims that the Falcon EDR sensor bug could be exploited for privilege escalation or remote code execution.
ICS/OT
Vulnerabilities found in solar power systems could have been exploited by hackers to cause disruption and possibly blackouts.
Endpoint Security
Researchers disclose the details of GhostWrite, a RISC-V CPU vulnerability that can be exploited to gain full access to targeted devices.
Black Hat
Researcher showcases hack against Microsoft Windows Update architecture, turning fixed vulnerabilities into zero-days.
Vulnerabilities
A Chrome 127 update patches five vulnerabilities, and Firefox 129 addresses over a dozen security holes.
Disaster Recovery
CrowdStrike says the Falcon sensor crash that blue-screened Windows machines was caused by a "confluence" of vulnerabilities and testing gaps.
Vulnerabilities
Microsoft paid out $16.6 million to over 340 security researchers through its bug bounty programs over the past year.
Endpoint Security
Microsoft is revamping how anti-malware tools interact with the Windows kernel to avoid another CrowdStrike faulty update catastrophe.
Data Breaches
Malware & Threats
Vulnerabilities