News

Newly released version of Exim mail server patches remote code execution vulnerability in versions up to and including 4.92.1. The vulnerability (CVE…

Cisco released patches for a critical vulnerability (CVE-2019-12643) with a CVSS score of 10. The vulnerability is due to an improper check performe…

Recently, Apple accidentally unpatched a vulnerability it had already fixed, making current versions of iOS vulnerable to hackers and allowing the ja…

The open source machine emulator QEMU is affected by a vulnerability that can lead to a denial-of-service (DoS) condition or arbitrary code execution…

Antivirus software supposedly provide robust security to users against cyber attacks. However, like all other tools, these tools can also suffer secu…

Recently disclosed vulnerabilities affecting enterprise virtual private network (VPN) products from Fortinet and Pulse Secure have been exploited in …

Managing a WordPress website can sap a lot of your time and energy, which otherwise you'd spend on managing your business.

A new zero-day vulnerability in the for Windows impacting over 96 million users was disclosed by researcher Vasily Kravets.

Security expert discovered multiple flaws in 4G routers manufactured by several companies, some of them could allow attackers to take over the device…

A researcher discovered 6 flaws in the image transfer protocol used in Canon EOS 80D DSLR cameras that allow him to infect the device with ransomware…

Experts demonstrated that SQLite database can be abused by threat actors as an attack vector to execute malicious code in other apps.

Researchers at firmware security company Eclypsium have analyzed device drivers from major vendors and identified over 40 drivers from 20 firms conta…

Networking behemoth Cisco has rolled out an important firmware update for users of its 220 Series smart switches after a researcher discovered three …

Two researchers publicly disclosed a zero-day vulnerability that affects the popular Steam game client for Windows, 0ver 100 million users at risk.

Security researchers have discovered almost a dozen zero-day vulnerabilities in VxWorks, one of the most widely used real-time operating systems (RTO…

The Australian Cyber Security Centre (ACSC) has released updates to its Essential Eight Maturity Model. The model assists organizations in determinin…

Mozilla released new versions of it's browser Firefox (67.0.3) and Firefox ESR (60.7.1) to address critical vulnerability (CVE-2019-11707) that is be…

Antivirus company Bitdefender with cooperation of several law enforcement agencies released decryptor for the newest versions of GandCrab ransomware.…

Email server Exim contains a critical remote code execution vulnerability (CVE-2019-10149). An attacker could exploit the vulnerability to take cont…

Elasticsearch announced that the core security features of the Elastic Stack are now free. This means that users can now encrypt network traffic, cre…

Microsoft releases security patches to address critical remote code execution vulnerability (CVE-2019-0708) that exists in Remote Desktop Services fo…

Linux systems based on kernel versions prior to 5.0.8 are affected by a race condition vulnerability CVE-2019-11815 leading to a use after free that …

Attacks on the SHA-1 hashing algorithm just got a lot more dangerous last week with the discovery of the first-ever "chosen-prefix collision attack,"…

Mozilla has released an update today for Firefox (66.0.4) and Firefox ESR (60.6.2) that fixes the issue with an expired signing certificate that disa…

Web management interface iDrac from Dell EMC contains several vulnerabilities. A remote attacker could exploit some of these vulnerabilities to take …

The Internet Systems Consortium (ISC) has released updates that address vulnerabilities in versions of ISC Berkeley Internet Name Domain (BIND). A re…

Drupal has released security updates to address multiple vulnerabilities in Drupal Core. A remote attacker could exploit some of these vulnerabilitie…

Multiple VPN applications store the authentication and/or session cookies insecurely in memory and/or log files. If an attacker has persistent access…

The National Security Agency (NSA) announced the release at the RSA Conference of the free reverse engineering framework GHIDRA - a multi-platform re…

Critical vulnerability (CVE-2019-6340) has been discovered in popular content management system (CMS) Drupal that allows for remote code execution by…

WinRAR, one of the world's most popular Windows file compression applications, has patched last month a severe security flaw (CVE-2018-20250, CVE-201…

The latest research from RIPS Technologies GmbH revealed the existence of a critical remote code execution vulnerability that affects all previous ve…

Package manager snapd by Canonical contains vulnerability dubbed Dirty Cow (CVE-2019-7304), which can be exploited by an attacker to gain root access…

The vulnerability allows a malicious container to (with minimal user interaction) overwrite the host runc binary and thus gain root-level code execut…

A vulnerability discovered on office suites LibreOffice and OpenOffice allows for a remote code execution as soon as a user opens a malicious ODT fil…

Microsoft Exchange supports a API called Exchange Web Services (EWS). One of the EWS API functions is called PushSubscriptionRequest, which can be us…

Google’s technology incubator Jigsaw has revealed a quiz that tests users’ abilities to identify phishing attacks. The quiz is created based on the s…

Vulnerability was discovered in apt that allows a network man-in-the-middle (or a malicious package mirror) to execute arbitrary code as root on a ma…

A vulnerability in the Cisco Small Business Switches software could allow an unauthenticated, remote attacker to bypass the user authentication mecha…

Almost 773 million unique email addresses and just under 22 million unique passwords were found. The data, dubbed Collection #1, is a set of email ad…

Unpatched Windows vulnerability was published with a proof of concept. Microsoft plans to release patches as a part of the April update. The vulnerab…

Oracle has released its Critical Patch Update for January 2019 to address 284 vulnerabilities across multiple products. We encourages users and admin…

An unusually high number of transaction attempts encountered by Secure-D in Brazil and Malaysia coming from a series of Alcatel Android smartphone mo…

Three (CVE-2018-16864, CVE-2018-16865, CVE-2018-16866) vulnerabilities discovered in systemd-journald. First two are memory corruptions (attacker-con…

The advisory describes a vulnerability in SME Server 9.2, which lets an unauthenticated attackers perform XSS attack in web management portal that le…

National Cyber and Information Security Agency issued warning about software and hardware products from the following chinese companies:
Huawe…

New version of phpMyAdmin (one of the most popular and widely used MySQL database management systems) was released. Among other bug fixes, the newest…

US-CERT team issues a warning to inform computer network defenders about SamSam ransomware. So far it seems that the threat gains access through vul…

Microsoft turned on the ability to securely sign in with your Microsoft account using a standards-based FIDO2 compatible device—no username or passwo…

VMware has released security updates to address vulnerabilities in ESXi, Workstation, and Fusion. An attacker could exploit these vulnerabilities to …