Apple has rolled out security updates to address dozens of iOS and macOS vulnerabilities, including a severe iOS bug dubbed WiFiDemon that could lead to denial of service or arbitrary code execution. click here...
Google has released Chrome 91.0.4472.164 for Windows, Mac, and Linux that addresses seven vulnerabilities, including a high severity zero-day vulnerability, tracked as CVE-2021-30563, that has been exploited in the wild. click here to read...
CDNs can become a choice of targets for adversaries as, if compromised, the attack can have far-reaching consequences for many websites, online stores, and their customers. click here to read full Article Read more...
WooCommerce, an e-commerce plugin for the WordPress content management system has been updated to patch a serious vulnerability that could be exploited without authentication. click here to read full Article Read more on Malware...
Based on Microsoft’s assessment of the security vulnerability, unauthenticated adversaries require physical access to the target’s device to exploit it in high complexity attacks. click here to read full Article Read more on Malware...
Cisco released security patches for high severity vulnerabilities in Business Process Automation (BPA) and Web Security Appliance (WSA) that expose users to privilege escalation attacks. click here to read full Article Read more on...
The Taiwan-based network-attached storage (NAS) maker QNAP has addressed a critical security vulnerability enabling attackers to compromise vulnerable NAS devices’ security. click here to read full Article Read more on Malware updates & News
Google has rolled out an update for its Chrome web browser to fix a bunch of security flaws, including a zero-day vulnerability that is known to be actively exploited by threat actors. click here...
Intel addressed 73 security flaws as part of the June 2021 Patch Tuesday, including high severity ones impacting some versions of Intel’s Security Library and the BIOS firmware for Intel processors. click here to...
The IT giant fixed three high-severity vulnerabilities affecting Webex Player for Windows and macOS. Two of these are memory corruption vulnerabilities impacting releases 41.4 and later. click here to read full Article Read more...
Unauthenticated attackers can achieve RCE on vulnerable clients by combining a reflected cross-site scripting (XSS) bug with a Chromium Embedded Framework (CEF) sandbox escape. click here to read full Article Read more on Malware...
Hewlett Packard Enterprise (HPE) has fixed a critical zero-day remote code execution (RCE) flaw in its HPE Systems Insight Manager (SIM) software for Windows that it originally disclosed in December. click here to read...
SonicWall urged customers to ‘immediately’ address a post-authentication vulnerability, tracked as CVE-2021-20026, impacting on-premises versions of the Network Security Manager (NSM). click here to read full Article Read more on Malware updates & News
Hewlett Packard Enterprise (HPE) has released a security update to address a zero-day remote code execution vulnerability in the HPE Systems Insight Manager (SIM) software, disclosed in December 2020. click here to read full...
All four critical vulnerabilities announced by Microsoft are new, and security pros are advised to patch in the first 72 hours to reduce risk in safeguarding both data and infrastructure. click here to read...
Cisco has fixed a six-month-old zero-day vulnerability found in the Cisco AnyConnect Secure Mobility Client VPN software, with publicly available proof-of-concept exploit code. click here to read full Article Read more on Malware updates...
