Jira Data Center user? Here's a critical Ehcache vulnerability to spoil your day
Update now – and maybe firewall the thing off while you're at it
22 Jul 2021
Articles about Vulnerability
Fortinet's security appliances hit by remote code execution vulnerability
Cure worse than the disease for anyone with the 'fgfmsd' daemon activated
20 Jul 2021
Researchers warn of unpatched remote code execution flaws in Schneider Electric industrial gear
Updated ModiPwn attack gives full control over Modicon programmable logic controllers
13 Jul 2021
You've patched that critical Sage X3 ERP security hole, yeah? Not exposing the suite to the internet, either, yeah?
Details of flaws now public for miscreants to exploit
07 Jul 2021
Leaked print spooler exploit lets Windows users remotely execute code as system on your domain controller
Kill this service immediately
30 Jun 2021
KVM flaw on AMD servers gave malicious VMs a route to take over the host
Updated Vuln thankfully patched following Google Project Zero disclosure
30 Jun 2021
‘What are the odds someone will find and exploit this?’ Nice one — you just released an insecure app
Feature Who’s to blame: devs or management? And how do we cure application vulnerability epidemic
25 Jun 2021
Boffins promise protection and perfect performance with new ZeRØ, No-FAT memory safety techniques
Fast, easy to implement, and knocks attacks like Spectre on the head – what's the catch?
23 Jun 2021
Zoll Defibrillator Dashboard would execute contents of random Excel files ordinary users could import
Medical device cybersecurity raises its head in CISA warning
15 Jun 2021
NHS-backed org reacted to GitHub leak disclosure with legal threats and police call, complains IT pro
+Comment Retention of now-deleted security breach evidence sparks spat
14 May 2021
Compsci boffin publishes proof-of-concept code for 54-year-old zero-day in Universal Turing Machine
Patch your devi... oh, hang on a sec
11 May 2021
PSA: If you're still giving users admin rights, maybe try not doing that. Would've helped dampen 100+ Microsoft vulns last year – report
Limiting access is great though 'patching is the only permanent fix'
17 Mar 2021
Proof of concept code published for latest Saltstack CVE: Don't be an update laggard
Any user could become root, warns Immersive Labs researcher
03 Mar 2021
NurseryCam hacked, company shuts down IoT camera service
Updated Real names, usernames, and what appeared to be SHA-1 hashed passwords* exposed
22 Feb 2021
Just 2.6% of 2019's 18,000 tracked vulnerabilities were actively exploited in the wild
So says Kenna Security in a refreshing piece of counter-FUD analysis
18 Feb 2021
It's 2021 and you can hijack a Cisco SD-WAN deployment with malicious IP traffic and a buffer overflow. Patch now
And also fix up these other holes that can be exploited via HTTP requests, SQL injection, etc
22 Jan 2021
How good are you at scoring security vulnerabilities, really? Boffins seek infosec pros to take rating skill survey
Real-world CVSS figures are a little variable, or so these folks reckon
08 Jan 2021
VMware urges sysadmins to apply workarounds after critical Workspace command execution vuln found
If you've been pwned in the past, pay special attention to this one
24 Nov 2020
Create a news alert about Vulnerability, or find more stories about Vulnerability.
