Security
Volunteer Dutch flaw finders bag $100k to forward national bug bounty goal
Huntress Labs tips some loose change into vuln-spotters' cup
13 Jan 2022 08:33 |
Vulnerability
Jump to articles tagged with Vulnerability.
Explore broader topics
Explore narrower topics
Articles tagged with Vulnerability
Security
Info-saturated techie builds bug alert service that phones you to warn of new vulns
Or SMSes, if the idea of midnight robot calls worries you
12 Jan 2022 11:02 | 10
Opinion
Open source isn't the security problem – misusing it is
Security is a process, not a product
12 Jan 2022 08:30 | 43
Security
Make sure you're up-to-date with Sonicwall SMA 100 VPN box patches – security hole exploit info is now out
Nothing like topping off unauth'd remote code execution with a su password of ... password
11 Jan 2022 22:46 | 1
Security
Belgian defence ministry admits attackers accessed its computer network by exploiting Log4j vulnerability
Perpetrators' ID unknown, however
21 Dec 2021 12:33 | 60
Updated
Log4j RCE latest: In case you hadn't noticed, this is Really Very Bad, exploited in the wild, needs urgent patching
This might be the bug that deserves the website, logo and book deal
13 Dec 2021 23:07 | 36
Updated
Log4j RCE: Emergency patch issued to plug critical auth-free code execution hole in widely used logging utility
Prepare to have a very busy weekend of mitigating and patching
10 Dec 2021 16:04 | 65
Security
Netgear router flaws exploitable with authentication ... like the default creds on Netgear's website
Don't just install the patch, change your router passwords too
03 Dec 2021 17:30 | 18
Security
Visiting a booby-trapped webpage could give attackers code execution privileges on HP network printers
Patches available for 150 affected products
30 Nov 2021 15:59 | 27
Security
Zero-day proof-of-concept exploit lands for Windows make-me-admin vulnerability
InstallerFileTakeOver code pops up on GitHub
23 Nov 2021 20:21 | 9
Security
Thousands of internet-connected databases contain high or critical CVEs, says report by cloud security biz
Put your data on someone else's computer to keep it safe, urges Imperva
14 Sep 2021 11:30 | 14
Personal Tech
BrakTooth vulnerabilities put Bluetooth users at risk – and some devices are going unpatched
Qualcomm, Texas Instruments alleged to be leaving Bluetooth chips open to attack
01 Sep 2021 15:41 | 12
Devops
Jira Data Center user? Here's a critical Ehcache vulnerability to spoil your day
Update now – and maybe firewall the thing off while you're at it
22 Jul 2021 19:12 |
Security
Fortinet's security appliances hit by remote code execution vulnerability
Cure worse than the disease for anyone with the 'fgfmsd' daemon activated
20 Jul 2021 14:30 | 1
Security
So nice of China to put all of its network zero-day vulns in one giant database no one will think to break into
We sum up Middle Kingdom's massive crackdown on bug reports
15 Jul 2021 01:07 | 29
Updated
Researchers warn of unpatched remote code execution flaws in Schneider Electric industrial gear
ModiPwn attack gives full control over Modicon programmable logic controllers
13 Jul 2021 10:45 | 31
Security
You've patched that critical Sage X3 ERP security hole, yeah? Not exposing the suite to the internet, either, yeah?
Details of flaws now public for miscreants to exploit
07 Jul 2021 23:56 | 1
Security
Leaked print spooler exploit lets Windows users remotely execute code as system on your domain controller
Kill this service immediately
30 Jun 2021 15:19 | 54
Updated
KVM flaw on AMD servers gave malicious VMs a route to take over the host
Vuln thankfully patched following Google Project Zero disclosure
30 Jun 2021 12:26 |
Feature
‘What are the odds someone will find and exploit this?’ Nice one — you just released an insecure app
Who’s to blame: devs or management? And how do we cure application vulnerability epidemic
25 Jun 2021 10:01 | 72
Security
Boffins promise protection and perfect performance with new ZeRØ, No-FAT memory safety techniques
Fast, easy to implement, and knocks attacks like Spectre on the head – what's the catch?
23 Jun 2021 13:27 | 18
Security
Zoll Defibrillator Dashboard would execute contents of random Excel files ordinary users could import
Medical device cybersecurity raises its head in CISA warning
15 Jun 2021 18:16 | 15
Security
Intel's latest patch set plugs some serious holes in CPU, Bluetooth, server, and – ironically – security lines
Reports through Chipzilla's bug bounty scheme growing, but still in the minority
09 Jun 2021 12:15 | 5
QCon Plus
What to do about open source vulnerabilities? Move fast, says Linux Foundation expert
The CIO does not decide how soon you need to respond. 'The person who decides is the attacker'
26 May 2021 11:34 | 41
+Comment
NHS-backed org reacted to GitHub leak disclosure with legal threats and police call, complains IT pro
Retention of now-deleted security breach evidence sparks spat
14 May 2021 10:02 | 101
Security
Compsci boffin publishes proof-of-concept code for 54-year-old zero-day in Universal Turing Machine
Patch your devi... oh, hang on a sec
11 May 2021 09:15 | 59
Security
PSA: If you're still giving users admin rights, maybe try not doing that. Would've helped dampen 100+ Microsoft vulns last year – report
Limiting access is great though 'patching is the only permanent fix'
17 Mar 2021 07:45 | 71
Security
This Netgear SOHO switch has 15 – count 'em! – vulns, which means you need to upgrade the firmware... now
One of them is a critical RCE bug
11 Mar 2021 17:59 | 23
Security
Proof of concept code published for latest Saltstack CVE: Don't be an update laggard
Any user could become root, warns Immersive Labs researcher
03 Mar 2021 16:47 | 3
Updated
NurseryCam hacked, company shuts down IoT camera service
Real names, usernames, and what appeared to be SHA-1 hashed passwords* exposed
22 Feb 2021 17:30 | 28
Security
Just 2.6% of 2019's 18,000 tracked vulnerabilities were actively exploited in the wild
So says Kenna Security in a refreshing piece of counter-FUD analysis
18 Feb 2021 18:00 | 11
Security
It's 2021 and you can hijack a Cisco SD-WAN deployment with malicious IP traffic and a buffer overflow. Patch now
And also fix up these other holes that can be exploited via HTTP requests, SQL injection, etc
22 Jan 2021 07:04 | 10
Security
How good are you at scoring security vulnerabilities, really? Boffins seek infosec pros to take rating skill survey
Real-world CVSS figures are a little variable, or so these folks reckon
08 Jan 2021 09:30 | 10
Security
VMware urges sysadmins to apply workarounds after critical Workspace command execution vuln found
If you've been pwned in the past, pay special attention to this one
24 Nov 2020 19:04 |
Security
Why, yes, you can register an XSS attack as a UK company name. How do we know that? Someone actually did it
And the 'acceptable company name' charset is hardcoded... in legislation
30 Oct 2020 13:00 | 64
Security
JavaScript-based address bar spoofing vulns patched in Safari, Yandex, Opera
Are you where you think you are, or are you where I want you to think you are?
24 Oct 2020 07:14 | 11
Security
How much does Oracle love you? Thiiiis much: Latest patch bundle has 402 fixes
How many times do you want to read the CVSS rating 9.8 today?
21 Oct 2020 18:32 | 3
Security
For Foxit's sake: Windows and Mac users alike urged to patch PhantomPDF over use-after-free vulns
CISA points spotlight at PDF reader 'n' creator suite
13 Oct 2020 17:30 | 14
Edge + IoT
Burning down the house! Consumer champ Which? probes smart plugs to find a bunch of insecure fire-risk tat
Yep, plugs. The things that pick up electrickery from the wall
01 Oct 2020 07:57 | 70
Security
It's been a vintage year for bug bounty hunters, says HackerOne as it boasts of $40m+ passing through its treasure chests
Big money, says CEO, but what would it cost not to find and fix these vulns?
22 Sep 2020 21:06 | 2
Security
Shared memory vulnerability in IBM's Db2 database could let nefarious insiders wreak havoc – so get patching
Lack of protections around trace facility gives local users read and write access
21 Aug 2020 13:38 | 7
Security
If you own one of these 45 Netgear devices, replace it: Kit maker won't patch vulnerable gear despite live proof-of-concept code
That's one way of speeding up the tech refresh cycle
30 Jul 2020 11:28 | 81
Security
If you haven't potentially exposed 1000s of customers once again with networking vulns, step forward... Not so fast, Palo Alto Networks
Getting to be a real PAN in the OS
09 Jul 2020 10:12 | 6
Security
Holy Guacamole! Researchers find Apache remote desktop software was silently pwnable for snooping on sessions
Best get updating pronto, folks
02 Jul 2020 22:05 | 5
Security
Trend Micro pulls another app over security fears: This time, the Privacy Browser in the Dr Safety Android suite
Some bugs prove very persistant
12 Jun 2020 06:03 | 1
Security
GitHub blasts code-scanning tool into all open-source projects
Rub-a-dub-dub, give your buggy code a scrub
06 May 2020 18:30 | 4
Security
AsSalt-ed at the weekend: Miscreants roast Ghost, LineageOS totters as Salt bug bites
Ah oh, SaltStack's frightnin' (with apologies to Howlin' Wolf)
04 May 2020 12:02 | 2
Security
That critical VMware vuln allowed anyone on your network to create new admin users, no creds needed
Reason behind murky CVSS 10 score revealed by Guardicore
17 Apr 2020 15:59 | 16
Security
Wi-Fi of more than a billion PCs, phones, gadgets can be snooped on. But you're using HTTPS, SSH, VPNs... right?
Encryption keys forced to zero by chip-level KrØØk flaw
27 Feb 2020 00:29 | 50
Code dive
Anatomy of OpenBSD's OpenSMTPD hijack hole: How a malicious sender address can lead to remote pwnage
Function accidentally returns OK instead of no-way
30 Jan 2020 05:56 | 43
Security
As miscreants prey on thousands of vulnerable boxes, Citrix finally emits patches to fill in hijacking holes in Gateway and ADC
SD-WAN WANOP will have to wait a few days, though
20 Jan 2020 17:40 | 5
Updated
Hundreds of millions of Broadcom-based cable modems at risk of remote hijacking, eggheads fear
It's got a name and logo so it's serious, you guys
10 Jan 2020 23:18 | 27
Security
TikTok on the clock, and the hacking won't stop: SMS spoofing vuln let baddies twiddle teens' social media videos
Uploads, deletions, private-to-public switcharoos, all bad stuff
08 Jan 2020 18:01 | 4
Security
New year, new critical Cisco patches to install – this time for a dirty dozen of bugs that can be exploited to sidestep auth, inject commands, etc
Data Center Network Manager bugapalooza with three must-fix flaws
03 Jan 2020 20:10 | 3
Security
WhatsApp chaps rapped for crap app group chat zap: Infosec bods find a way to nuke messages, fix issued
Good news for Check Point; less so for blabbermouths with regrets
17 Dec 2019 11:00 | 24
Security
Ever wonder how hackers could possibly pwn power plants? Here are 54 Siemens bugs that could explain things
Arbitrary code execution in a controller, what could go wrong?
13 Dec 2019 10:51 | 43
Disclosure
We're almost into the third decade of the 21st century and we're still grading security bugs out of 10 like kids. Why?
Infosec veteran Marc Rogers on why we need a better system to rate vulnerabilities
07 Nov 2019 08:07 | 48
Video
The NetCAT is out of the bag: Intel chipset exploited to sniff SSH passwords as they're typed over the network
Cunning data-snooping side-channel technique is tough to exploit, Chipzilla warns
10 Sep 2019 17:00 | 69
Updated
Not very Suprema: Biometric access biz bares 27 million records and plaintext admin creds
Biostar 2 goes supernova after Israeli duo's probings
14 Aug 2019 12:34 | 64
Updated
Dodgy vids can hijack PCs via VLC security flaw, US, Germany warn. Software's makers not app-y with that claim
'Fake news!' dev team cries
23 Jul 2019 20:05 | 21
Create a news alert about Vulnerability, or find more stories about Vulnerability.
