VMware urges sysadmins to apply workarounds after critical Workspace command execution vuln found
If you've been pwned in the past, pay special attention to this one
24 Nov 2020
Articles about Vulnerability
Why, yes, you can register an XSS attack as a UK company name. How do we know that? Someone actually did it
And the 'acceptable company name' charset is hardcoded... in legislation
30 Oct 2020
JavaScript-based address bar spoofing vulns patched in Safari, Yandex, Opera
Are you where you think you are, or are you where I want you to think you are?
24 Oct 2020
How much does Oracle love you? Thiiiis much: Latest patch bundle has 402 fixes
How many times do you want to read the CVSS rating 9.8 today?
21 Oct 2020
For Foxit's sake: Windows and Mac users alike urged to patch PhantomPDF over use-after-free vulns
CISA points spotlight at PDF reader 'n' creator suite
13 Oct 2020
Burning down the house! Consumer champ Which? probes smart plugs to find a bunch of insecure fire-risk tat
Yep, plugs. The things that pick up electrickery from the wall
01 Oct 2020
It's been a vintage year for bug bounty hunters, says HackerOne as it boasts of $40m+ passing through its treasure chests
Big money, says CEO, but what would it cost not to find and fix these vulns?
22 Sep 2020
Shared memory vulnerability in IBM's Db2 database could let nefarious insiders wreak havoc – so get patching
Lack of protections around trace facility gives local users read and write access
21 Aug 2020
If you own one of these 45 Netgear devices, replace it: Kit maker won't patch vulnerable gear despite live proof-of-concept code
That's one way of speeding up the tech refresh cycle
30 Jul 2020
Holy Guacamole! Researchers find Apache remote desktop software was silently pwnable for snooping on sessions
Best get updating pronto, folks
02 Jul 2020
That critical VMware vuln allowed anyone on your network to create new admin users, no creds needed
Reason behind murky CVSS 10 score revealed by Guardicore
17 Apr 2020
As miscreants prey on thousands of vulnerable boxes, Citrix finally emits patches to fill in hijacking holes in Gateway and ADC
SD-WAN WANOP will have to wait a few days, though
20 Jan 2020
TikTok on the clock, and the hacking won't stop: SMS spoofing vuln let baddies twiddle teens' social media videos
Uploads, deletions, private-to-public switcharoos, all bad stuff
08 Jan 2020
WhatsApp chaps rapped for crap app group chat zap: Infosec bods find a way to nuke messages, fix issued
Good news for Check Point; less so for blabbermouths with regrets
17 Dec 2019
Not very Suprema: Biometric access biz bares 27 million records and plaintext admin creds
UpdatedBiostar 2 goes supernova after Israeli duo's probings
14 Aug 2019
Millions of Windows Dell PCs need patching: Give-me-admin security gremlin found lurking in bundled support tool
UpdatedCan't spell SupportAssist without 'ass' and 'u' – other makers may be hit, too
20 Jun 2019
Another remote-code execution hole in top database engine SQLite: How it works, and why not to totally freak out
You know the drill: Patch and stop using C
10 May 2019
Sorry, Linux. We know you want to be popular, but cyber-crooks are all about Microsoft for now
Oh, and Flash! Arrrrrggghhh
19 Mar 2019
Create a news alert about Vulnerability, or find more stories about Vulnerability.
