Apple has rolled out important security updates to fix a new zero-day vulnerability that could allow attackers to hack iPhones, iPads, and Macs. The zero-day vulnerability dubbed as CVE-2022-22620 was disclosed to Apple by...
Organizations looking to minimize exposure to exploitable software should scan Twitter for mentions of security bugs as well as use the Common Vulnerability Scoring System or CVSS, Kenna Security argues. click here to read...
VMWare has shipped updates to Workstation, Fusion, and ESXi products to address an “important” security vulnerability that could be weaponized by a threat actor to take control of affected systems. The issue relates to...
HCL Digital Experience (DX), a platform for building and managing web portals, contained multiple vulnerabilities that could potentially lead to remote code execution (RCE), researchers claim. click here to read full Article Read more...
Apple on Monday released updates to iOS, macOS, tvOS, and watchOS with security patches for multiple vulnerabilities, including a remote jailbreak exploit chain as well as a number of critical issues in the Kernel and Safari web browser that...
The vulnerability, discovered by the security researcher Abdelhamid Naceri, can be exploited to bypass a patch released by Microsoft in February to address another information disclosure flaw. click here to read full Article Read...
Drupal has rolled out updates since cross-site scripting vulnerabilities were discovered within CKEditor. The developers… Drupal Release Patches for CKEditor XSS Bugs on Latest Hacking News. click here to read full Article Read more...
Months after researchers detailed Braktooth bugs, they now have released the PoC exploit to the… US CISA Pushes Vendors For BrakTooth Patches After PoC Goes Public on Latest Hacking News. click here to read...
GoCD is an open-source Continuous Integration and Continuous Delivery system (CI/CD) tool that is used by software developers and organizations for automating software delivery. click here to read full Article Read more on Malware...
On Monday and Tuesday, Apple released iOS 14.8.1, iPadOS 14.8.1, watchOS 8.1, and tvOS 15.1, patching 24 security vulnerabilities, including some critical flaws, in total. click here to read full Article Read more on...
The proof-of-concept exploit code for three iOS zero-day vulnerabilities (and a fourth one patched in July) was published on GitHub after Apple delayed patching and failed to credit the researcher. click here to read...
Network security company SonicWall has addressed a critical security vulnerability affecting its Secure Mobile Access (SMA) 100 series appliances that can permit remote, unauthenticated attackers to gain administrator access on targeted devices remotely. Tracked...
Google has released Chrome 93.0.4577.82 for Windows, Mac, and Linux to fix eleven security vulnerabilities, two of them being zero-days exploited in the wild. The update is currently rolling out worldwide in the Stable...
The security issue is identified as CVE-2021-40539. It is considered critical as it can allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. click here to read full Article Read...
Cofense researchers spotted one attack with an email delivering an HTML application (HTA) file attachment disguised as fake patches for a new vulnerability affecting the Chrome web browser. click here to read full Article...
Google released Chrome 91.0.4472.164 for Windows, Mac, and Linux to patch seven security vulnerabilities in which one of them is a high severity zero-day vulnerability that was being exploited in the wild. Google was...
