Users of Horde Webmail are being urged to disable a feature to contain a nine-year-old unpatched security vulnerability in the software that could be abused to gain complete access to email accounts simply by...
A security researcher has recently disclosed serious vulnerabilities affecting NUUO NVRmini2 devices. The researcher claims… Researcher Discloses Unpatched Vulnerabilities In NUUO NVRmini2 Devices on Latest Hacking News. click here to read full Article Read...
A software bug introduced in Apple Safari 15’s implementation of the IndexedDB API could be abused by a malicious website to track users’ online activity in the web browser and worse, even reveal their...
Researchers have found new campaigns distributing Formbook malware in the wild with evasive techniques. While… New Formbook Malware Targets Unpatched Windows Systems – Update Now! on Latest Hacking News. click here to read full...
The list of the affected models is extensive and covers many of Dahua cameras, even some thermal ones. On Shodan, researchers found over 1.2 million Dahua systems around the world. click here to read...
Cybersecurity researchers on Tuesday disclosed details of an unpatched vulnerability in macOS Finder that could be abused by remote adversaries to trick users into running arbitrary commands on the machines. “A vulnerability in macOS...
Google Project Zero researcher James Forshaw shared details of a Windows AppContainer vulnerability after Microsoft backtracked on its previous stance of not fixing the flaw and announcing to address it soon. click here to...
Security researchers have uncovered three vulnerabilities in Wodify app that could allow an authenticated user to modify production data and extract sensitive personal information. click here to read full Article Read more on Malware...
Security researchers warn of three new zero-day vulnerabilities in the Kaseya Unitrends service. The vulnerabilities include remote code execution and authenticated privilege escalation on the client side. click here to read full Article Read...
Microsoft on Thursday shared fresh guidance on yet another vulnerability affecting the Windows Print Spooler service, stating that it’s working to address it in an upcoming security update. click here to read full Article...
An unpatched security vulnerability affecting Google’s Compute Engine platform could be abused by an attacker to take over virtual machines over the network. “This is done by impersonating the metadata server from the targeted...
As many as six zero-days have been uncovered in an application called Remote Mouse, allowing a remote attacker to achieve full code execution without any user interaction. click here to read full Article Read...
Six zero-days have been disclosed in an application called Remote Mouse that allows a remote attacker to achieve full code execution without any user interaction. The unpatched flaws, collectively called ‘Mouse Trap,’ were disclosed...
A newly discovered critical zero-day authentication bypass vulnerability (CVE-2021-22893) in Pulse Secure VPN devices is found to be currently exploited in the wild. At least two threat actors have been behind a series of...
A malvertising operation known under the codename of Tag Barnakle has breached more than 120 ad servers over the past year and inserted malicious code into legitimate ads to redirect website visitors. click here...
An Indian security researcher has publicly published a proof-of-concept (PoC) exploit code for a newly discovered flaw impacting Google Chrome and other Chromium-based browsers like Microsoft Edge, Opera, and Brave. click here to read...
