NHS-backed org reacted to GitHub leak disclosure with legal threats and police call, complains IT pro
+Comment Retention of now-deleted security breach evidence sparks spat
14 May 2021
Articles about Vulnerability
Compsci boffin publishes proof-of-concept code for 54-year-old zero-day in Universal Turing Machine
Patch your devi... oh, hang on a sec
11 May 2021
PSA: If you're still giving users admin rights, maybe try not doing that. Would've helped dampen 100+ Microsoft vulns last year – report
Limiting access is great though 'patching is the only permanent fix'
17 Mar 2021
Proof of concept code published for latest Saltstack CVE: Don't be an update laggard
Any user could become root, warns Immersive Labs researcher
03 Mar 2021
NurseryCam hacked, company shuts down IoT camera service
Updated Real names, usernames, and what appeared to be SHA-1 hashed passwords* exposed
22 Feb 2021
Just 2.6% of 2019's 18,000 tracked vulnerabilities were actively exploited in the wild
So says Kenna Security in a refreshing piece of counter-FUD analysis
18 Feb 2021
It's 2021 and you can hijack a Cisco SD-WAN deployment with malicious IP traffic and a buffer overflow. Patch now
And also fix up these other holes that can be exploited via HTTP requests, SQL injection, etc
22 Jan 2021
How good are you at scoring security vulnerabilities, really? Boffins seek infosec pros to take rating skill survey
Real-world CVSS figures are a little variable, or so these folks reckon
08 Jan 2021
VMware urges sysadmins to apply workarounds after critical Workspace command execution vuln found
If you've been pwned in the past, pay special attention to this one
24 Nov 2020
Why, yes, you can register an XSS attack as a UK company name. How do we know that? Someone actually did it
And the 'acceptable company name' charset is hardcoded... in legislation
30 Oct 2020
JavaScript-based address bar spoofing vulns patched in Safari, Yandex, Opera
Are you where you think you are, or are you where I want you to think you are?
24 Oct 2020
How much does Oracle love you? Thiiiis much: Latest patch bundle has 402 fixes
How many times do you want to read the CVSS rating 9.8 today?
21 Oct 2020
For Foxit's sake: Windows and Mac users alike urged to patch PhantomPDF over use-after-free vulns
CISA points spotlight at PDF reader 'n' creator suite
13 Oct 2020
Burning down the house! Consumer champ Which? probes smart plugs to find a bunch of insecure fire-risk tat
Yep, plugs. The things that pick up electrickery from the wall
01 Oct 2020
It's been a vintage year for bug bounty hunters, says HackerOne as it boasts of $40m+ passing through its treasure chests
Big money, says CEO, but what would it cost not to find and fix these vulns?
22 Sep 2020
Shared memory vulnerability in IBM's Db2 database could let nefarious insiders wreak havoc – so get patching
Lack of protections around trace facility gives local users read and write access
21 Aug 2020
If you own one of these 45 Netgear devices, replace it: Kit maker won't patch vulnerable gear despite live proof-of-concept code
That's one way of speeding up the tech refresh cycle
30 Jul 2020
Holy Guacamole! Researchers find Apache remote desktop software was silently pwnable for snooping on sessions
Best get updating pronto, folks
02 Jul 2020
Create a news alert about Vulnerability, or find more stories about Vulnerability.
