GandCrab Ransomware Spreads Using Multiple Known Vulnerabilities

GandCrab Ransomware Spreads Using Multiple Known Vulnerabilities

The malware forces reboot to start encrypting the disk

  • Security
  • By Sergiu Gatlan
  • September 28th, 2018
50 Million Facebook Users Affected by Account Take Over Security Issue

50 Million Facebook Users Affected by Account Take Over Security Issue

40 million more also having their access tokens reset

  • Security
  • By Sergiu Gatlan
  • September 27th, 2018
Study Finds 83 Percent of Home Routers are Vulnerable to Attacks

Study Finds 83 Percent of Home Routers are Vulnerable to Attacks

28% of them are exposed to critical or high security risks

  • Security
  • By Sergiu Gatlan
  • September 21st, 2018
Zero-Day Windows Jet Database Engine Vulnerability Allows Remote Code Execution

Zero-Day Windows Jet Database Engine Vulnerability Allows Remote Code Execution

Out-of-bounds write needs user interaction

  • Security
  • By Sergiu Gatlan
  • September 20th, 2018
Western Digital My Cloud NAS Vulnerable to Authentication Bypass for Over a Year

Western Digital My Cloud NAS Vulnerable to Authentication Bypass for Over a Year

Issue still not fixed although WD was notified a year ago

  • Security
  • By Sergiu Gatlan
  • September 10th, 2018
Zero-Day Tor Browser Exploit Bypassed NoScript to Execute Malicious Code

Zero-Day Tor Browser Exploit Bypassed NoScript to Execute Malicious Code

Bug fixed by NoScript developer four hours later

390K Websites at Risk Because of Public .Git Repos

390K Websites at Risk Because of Public .Git Repos

Misconfigured servers exposed database passwords, API keys

New Variant of Spectre Security Flaw Discovered: Speculative Buffer Overflows

New Variant of Spectre Security Flaw Discovered: Speculative Buffer Overflows

It's a variant of the first Spectre security vulnerability

Lazy FPU Vulnerability Now Patched for Red Hat Enterprise Linux 7, CentOS 7 PCs

Lazy FPU Vulnerability Now Patched for Red Hat Enterprise Linux 7, CentOS 7 PCs

Users are urged to update their installations immediately

Microsoft Explains How a Windows Security Bug Gets a Fix (Or Not)

Microsoft Explains How a Windows Security Bug Gets a Fix (Or Not)

Company details security servicing criteria

Microsoft Fixes Critical Remote Code Execution Flaw in hcsshim Library

Microsoft Fixes Critical Remote Code Execution Flaw in hcsshim Library

Updated version of the library available on GitHub

Nvidia Tegra X1 Coldboot Vulnerability Lets Anyone Hack a Nintendo Switch

Nvidia Tegra X1 Coldboot Vulnerability Lets Anyone Hack a Nintendo Switch

An unpatchable flaw was found in Nvidia Tegra X1 chip

  • Linux
  • By Marius Nestor
  • April 4th, 2018
Canonical Outs Major Kernel Update for Ubuntu 17.10 to Fix 22 Vulnerabilities

Canonical Outs Major Kernel Update for Ubuntu 17.10 to Fix 22 Vulnerabilities

It's also available for Ubuntu 16.04 LTS HWE systems

After Meltdown and Spectre, Intel CPUs Are Now Vulnerable to BranchScope Attacks <em>Updated</em>

After Meltdown and Spectre, Intel CPUs Are Now Vulnerable to BranchScope Attacks Updated

BranchScope is a newly discovered side-channel attack

  • Apple
  • By Marius Nestor
  • March 26th, 2018
Apple's iOS 11 Camera QR Code Reader Is Vulnerable to Malicious Attacks

Apple's iOS 11 Camera QR Code Reader Is Vulnerable to Malicious Attacks

It can be tricked to redirect users to malicious websites

Telegram Zero-Day Vulnerability Lets Hackers Pwn Your PC to Mine Cryptocurrency

Telegram Zero-Day Vulnerability Lets Hackers Pwn Your PC to Mine Cryptocurrency

It can also be used to deliver multi-purpose malware

How to Check If Your Linux PC Is Vulnerable to Meltdown & Spectre Security Flaws

How to Check If Your Linux PC Is Vulnerable to Meltdown & Spectre Security Flaws

These are the worse chip flaws in the history of computing

 
Want more? Browse: