All four critical vulnerabilities announced by Microsoft are new, and security pros are advised to patch in the first 72 hours to reduce risk in safeguarding both data and infrastructure. click here to read...
The notorious FIN7 cybercrime gang, a financially motivated group, is spreading a backdoor called Lizar under the guise of being a Windows pen-testing tool for ethical hackers. click here to read full Article Read...
Telegram groups are being abused by fraudsters peddling fake COVID-19 vaccination cards to the unvaccinated and anti-vaxxer communities, according to security researchers. click here to read full Article Read more on computer hacking news
A team of four cybersecurity professionals concluded that the ACT e-voting system errors did not impact any election outcomes, but could potentially sway future vote counts if left uncorrected. click here to read full...
A database filled with the medical records of nearly 200,000 U.S. military veterans was exposed online by United Valor, a vendor working for the Veterans Administration, according to an analyst. click here to read...
A handy DNS service written in Go to aid in the detection of several types of blind vulnerabilities. It monitors a pentester’s server for out-of-band DNS interactions and sends notifications with the received request’s...
Intel and AMD insist that users of their chips do not need to take any additional security measures as a result of the discovery because existing protections are adequate. click here to read full...
Russian cyberattacks are being deployed with new techniques – including exploiting vulnerabilities like the recent Microsoft Exchange zero-days – as its hackers continue to target governments, organizations, and energy providers around the world. click...
Scan your EC2 instance to find its vulnerabilities using Vuls (https://vuls.io/en/). Audit your EC2 instance to find security misconfigurations using Lynis (https://cisofy.com/solutions/#lynis). Scan your EC2 instance for signs of a rootkit using Chkrootkit (http://www.chkrootkit.org/). ...
The flaws could potentially allow an individual to view users’ personal information, including their location, gender, age, as well as class attendees, even if they have the private mode turned on. click here to...
'BadAlloc' vulnerabilities spell trouble for IoT, OT devices click here to read full Article Read More on latest Security Updates
The maintainers of Exim have released patches to address as many as 21 security vulnerabilities in its software which could allow unauthenticated attackers to attain complete remote code execution and gain root privileges. The...
Innovative twists on banking scams and corporate-account hunters wielding increasingly clever lures, including fake COVID-19 vaccine promises, are likely to dominate the spam and phishing landscape. click here to read full Article Read More...
HPE is urging customers to patch its edge application management tools that could allow an attacker to carry out a remote authentication bypass attack and infiltrate a customer’s cloud infrastructure. click here to read...
All defenses against Spectre side-channel attacks can now be considered broken, leaving billions of computers and other devices just as vulnerable today as they were three years ago. click here to read full Article...
A doctoral student at HSE University has proposed a new method to assess vulnerabilities in encryption systems, which is based on a brute-force search of possible options of symbol deciphering. click here to read...
