IoT Security
Nexx has ignored repeated attempts to report critical product vulnerabilities that can be exploited to remotely open garage doors, and take control of alarms...
Hi, what are you looking for?
SecurityWeek
All posts tagged "vulnerability"
ICS/OT
Water pumping systems made by ProPump and Controls are affected by several vulnerabilities that could allow hackers to cause significant problems.
Cloud Security
An Azure Active Directory (AAD) misconfiguration leading to Bing.com compromise earned Wiz researchers a $40,000 bug bounty reward.
Threat Intelligence
A new research report discusses the five most exploited vulnerabilities of 2022, and the five key risks that security teams should consider.
Mobile & Wireless
A vulnerability in Google Pixel phones allows for the recovery of an original, unedited screenshot from the cropped version.
Vulnerabilities
SAP has released 19 new notes on March 2023 Security Patch Day, including five notes rated hot news.
ICS/OT
Reports published by various industrial cybersecurity companies provide different numbers on ICS vulnerabilities — here’s why.
IoT Security
Researchers discover a dozen serious vulnerabilities in Akuvox smart intercom, but the vendor has not released any patches.
Vulnerabilities
A serious vulnerability in Veeam Backup & Replication may allow attackers to obtain encrypted credentials from the configuration database.
Vulnerabilities
Booking.com recently patched several vulnerabilities that could have been exploited to take control of a user’s account.
Supply Chain Security
Endor Labs has introduced an OWASP-style listing of the most important or impactful risks inherent in the use of open source software (OSS).
Vulnerabilities
Fortinet provides clarifications following ‘sensationalized reports’ related to exploitation attempts targeting the FortiNAC vulnerability CVE-2022-39952
Vulnerabilities
Security researcher finds severe vulnerability providing system admin access to Toyota’s global supplier management network.
Vulnerabilities
Vulnerabilities in open source health records management software OpenEMR could lead to patient data compromise, remote code execution (RCE).
Vulnerabilities
The latest BIND updates patch multiple remotely exploitable vulnerabilities that could lead to denial-of-service (DoS).
Mobile & Wireless
Technical details published for an Arm Mali GPU flaw leading to arbitrary kernel code execution and root on Pixel 6.
Vulnerabilities
Security researchers have observed an uptick in attacks targeting CVE-2021-35394, an RCE vulnerability in Realtek Jungle SDK.
Mobile & Wireless
Two vulnerabilities in Samsung’s Galaxy Store that could be exploited to install applications or execute JavaScript code by launching a web page.
Vulnerabilities
Several vulnerabilities have been patched in OpenText’s enterprise content management (ECM) product.
Artificial Intelligence
Attack demonstrates how LLM agents can combine known exploitation techniques with real-time reasoning to automate complex, multi-stage intrusions.
Artificial Intelligence
Artificial Intelligence
Artificial Intelligence
Cybercrime
Noteworthy stories that might have slipped under the radar: Anonymous-linked Canadian hacker jailed, researcher drops zero-days in open source projects, Venezuelans sentenced in the...
Artificial Intelligence
