Vulnerabilities
A critical vulnerability in Cisco Unified Industrial Wireless software could allow remote, unauthenticated attackers to inject commands with root privileges.
Hi, what are you looking for?
SecurityWeek
Cloud Security
Researchers warn about critical vulnerabilities in Ruijie Networks’ Reyee cloud management platform and Reyee OS network devices.
Vulnerabilities
Microsoft has patched potentially critical vulnerabilities in Update Catalog and Windows Defender on the server side.
Malware & Threats
Cleo has released patches for the exploited vulnerability and security firms have detailed the malware delivered in attacks.
Vulnerabilities
Two vulnerabilities in the Hunk Companion and WP Query Console WordPress plugins allow attackers to backdoor websites.
Mobile & Wireless
Cupertino ships iOS 18.2 and macOS Sequoia 15.2 patches to fix data leakage, sandbox escapes and code exection vulnerabilities.
Malware & Threats
Google pushes out major Chrome browser updates to fix multiple serious security defects.
Vulnerabilities
Attackers could have exploited IBM Security Verify Access vulnerabilities to compromise the entire authentication infrastructure.
Vulnerabilities
Yahoo researchers found nearly a dozen vulnerabilities in OpenText’s NetIQ iManager and some could have been chained for unauthenticated RCE.
Artificial Intelligence
Version 2.5 of WhiteRabbitNeo is designed to think like a seasoned red team expert, capable of identifying and exploiting vulnerabilities with remarkable speed and...
Vulnerabilities
Google has patched CVE-2024-10487, a critical Chrome vulnerability, and Mozilla has patched high-severity flaws in Firefox.
Vulnerabilities
Synology, QNAP and TrueNAS have started patching and mitigating the vulnerabilities exploited recently at Pwn2Own Ireland 2024.
Vulnerabilities
Apple has released security updates for iOS 18 and macOS Sequoia 15 to address dozens of vulnerabilities.
Vulnerabilities
Microsoft has rolled out mitigations for recently disclosed downgrade attacks targeting the Windows Update process.
Vulnerabilities
Pwn2Own Ireland 2024 participants have earned over $1 million for camera, printer, NAS device, smart speaker and smartphone exploits.
Artificial Intelligence
Nvidia rolls out urgent security updates to fix at least 8 high-severity vulnerabilities in GPU drivers for Windows and Linux.
Vulnerabilities
A Fortinet zero-day tracked as CVE-2024-47575 and named FortiJump has been exploited since at least June 2024.
Vulnerabilities
Over $350,000 was paid out on day 2 of Pwn2Own Ireland 2024, including $50,000 for an exploit targeting the Samsung Galaxy S24.
Government
The new agreement has a narrower scope and additional safeguards to minimize the risk to national security.
Fraud & Identity Theft
Tracking & Law Enforcement
Malware & Threats
Funding/M&A
Noteworthy stories that might have slipped under the radar: AV brand owner Gen Digital makes a $1 billion acquisition, Microsoft Recall captures sensitive data,...
Malware & Threats
Fraud & Identity Theft
