Researchers have released public exploit code and a proof of concept tool to test Bluetooth devices against System-on-a-Chip (SoC) security bugs impacting multiple vendors, including Intel, Qualcomm, Texas Instruments, and Cypress. click here to...
Why cloud bugs don't get CVEs, and why it's an issue click here to read full Article Read More on latest Security Updates
The Cupertino giant has recently rolled out major update for those users who haven’t upgraded… Apple Fixes Critical Bugs, Including A Zero-Day, With Latest iOS 14.8.1 on Latest Hacking News. click here to read...
Google on Thursday rolled out an emergency update for its Chrome web browser, including fixes for two zero-day vulnerabilities that it says are being actively exploited in the wild. Tracked as CVE-2021-38000 and CVE-2021-38003, the weaknesses relate...
On Monday and Tuesday, Apple released iOS 14.8.1, iPadOS 14.8.1, watchOS 8.1, and tvOS 15.1, patching 24 security vulnerabilities, including some critical flaws, in total. click here to read full Article Read more on...
New research from cloud security firm Zscaler, presented at the recent VB2021 conference, exploits bugs and coding errors in malware code to thwart infections by botnets, ransomware, and trojans. click here to read full...
FUSE is a penetration testing system designed to identify Unrestricted Executable File Upload (UEFU) vulnerabilities. The details of the testing strategy is in our paper, “FUSE: Finding File Upload Bugs via Penetration Testing”, which...
One of the prominent targets for hackers is Microsoft Exchange, and the attack vector typically involves a popular vulnerability which the organization hasn’t recently patched. A new solution by Microsoft aims at providing...
It works by detecting Exchange Servers vulnerable to one or more known threats and applies interim mitigations until a security update is available for admins to install. click here to read full Article Read...
Tracked as CVE-2021-34351 and CVE-2021-34348, the pair of critical bugs could allow a remote attacker to run commands on vulnerable systems that could lead to taking full control of the device. click here to...
Recognizing the rise in open source projects, HackerOne has now decided to expand its Internet… HackerOne Extends Internet Bug Bounty Program To Include Open Source Bugs on Latest Hacking News. click here to read...
As many as 11 security vulnerabilities have been disclosed in Nagios network management systems, some of which could be chained to achieve pre-authenticated remote code execution. click here to read full Article Read more...
Continuing the trail of zero-day bugs, Google has patched two more vulnerabilities affecting the Chrome… Google Fixed Two Chrome Zero-Day Bugs Under Attack on Latest Hacking News. click here to read full Article Read...
This week, the Redmond giant has released the monthly security fixes for its products. With… Microsoft September Patch Tuesday Fixes 86 Security Bugs on Latest Hacking News. click here to read full Article Read...
In the course of two months (July and August), security experts at GitHub have discovered arbitrary code execution vulnerabilities in the open-source Node.js packages, tar, and @npmcli/arborist. click here to read full Article Read...
Researchers spotted numerous security bugs in the Gutenberg Template Library & Redux Framework plugin that… Gutenberg Template Library Plugin Bugs Affected 1+ Million WordPress Sites on Latest Hacking News. click here to read full...
