NurseryCam hacked, company shuts down IoT camera service
Updated Real names, usernames, and what appeared to be SHA-1 hashed passwords* exposed
22 Feb 2021
Articles about Vulnerability
Just 2.6% of 2019's 18,000 tracked vulnerabilities were actively exploited in the wild
So says Kenna Security in a refreshing piece of counter-FUD analysis
18 Feb 2021
It's 2021 and you can hijack a Cisco SD-WAN deployment with malicious IP traffic and a buffer overflow. Patch now
And also fix up these other holes that can be exploited via HTTP requests, SQL injection, etc
22 Jan 2021
How good are you at scoring security vulnerabilities, really? Boffins seek infosec pros to take rating skill survey
Real-world CVSS figures are a little variable, or so these folks reckon
08 Jan 2021
VMware urges sysadmins to apply workarounds after critical Workspace command execution vuln found
If you've been pwned in the past, pay special attention to this one
24 Nov 2020
Why, yes, you can register an XSS attack as a UK company name. How do we know that? Someone actually did it
And the 'acceptable company name' charset is hardcoded... in legislation
30 Oct 2020
JavaScript-based address bar spoofing vulns patched in Safari, Yandex, Opera
Are you where you think you are, or are you where I want you to think you are?
24 Oct 2020
How much does Oracle love you? Thiiiis much: Latest patch bundle has 402 fixes
How many times do you want to read the CVSS rating 9.8 today?
21 Oct 2020
For Foxit's sake: Windows and Mac users alike urged to patch PhantomPDF over use-after-free vulns
CISA points spotlight at PDF reader 'n' creator suite
13 Oct 2020
Burning down the house! Consumer champ Which? probes smart plugs to find a bunch of insecure fire-risk tat
Yep, plugs. The things that pick up electrickery from the wall
01 Oct 2020
It's been a vintage year for bug bounty hunters, says HackerOne as it boasts of $40m+ passing through its treasure chests
Big money, says CEO, but what would it cost not to find and fix these vulns?
22 Sep 2020
Shared memory vulnerability in IBM's Db2 database could let nefarious insiders wreak havoc – so get patching
Lack of protections around trace facility gives local users read and write access
21 Aug 2020
If you own one of these 45 Netgear devices, replace it: Kit maker won't patch vulnerable gear despite live proof-of-concept code
That's one way of speeding up the tech refresh cycle
30 Jul 2020
Holy Guacamole! Researchers find Apache remote desktop software was silently pwnable for snooping on sessions
Best get updating pronto, folks
02 Jul 2020
That critical VMware vuln allowed anyone on your network to create new admin users, no creds needed
Reason behind murky CVSS 10 score revealed by Guardicore
17 Apr 2020
As miscreants prey on thousands of vulnerable boxes, Citrix finally emits patches to fill in hijacking holes in Gateway and ADC
SD-WAN WANOP will have to wait a few days, though
20 Jan 2020
TikTok on the clock, and the hacking won't stop: SMS spoofing vuln let baddies twiddle teens' social media videos
Uploads, deletions, private-to-public switcharoos, all bad stuff
08 Jan 2020
WhatsApp chaps rapped for crap app group chat zap: Infosec bods find a way to nuke messages, fix issued
Good news for Check Point; less so for blabbermouths with regrets
17 Dec 2019
Create a news alert about Vulnerability, or find more stories about Vulnerability.
