The US Cybersecurity and Infrastructure Security Agency (CISA) has identified 75 security vulnerabilities that pose a significant risk to its list of flaws that should be patched immediately. All of …
Vulnerabilities found in Bluetooth Low Energy gives hackers access to numerous devices
Cybersecurity researchers at NCC Group have found a critical flaw in Bluetooth Low Energy (BLE) receivers. The flaw may grant cyber criminals access to a range of devices, including phones, laptops, …
Massive New Security Update For 3.2 Billion Chrome Users Confirmed
Google Chrome security has experienced a busy past few weeks and there is no sign of slowing down. Just days after two emergency fixes for vulnerabilities being exploited in the wild and a record …
Continue Reading about Massive New Security Update For 3.2 Billion Chrome Users Confirmed
Healthcare Org Hit By Two Ransomware Gangs At Once
Security experts at Sophos have reported a recent scenario in which two competing threat groups deployed ransomware on the victim's network simultaneously. One of the groups was the Russia-linked …
Continue Reading about Healthcare Org Hit By Two Ransomware Gangs At Once
Lack of Patching Leaves 300,000 Routers at Risk for Attack
Hundreds of thousands of routers produced by a Latvian network hardware firm MikroTik are still vulnerable to at least one of four vulnerabilities that are over a year old. These vulnerabilities are …
Continue Reading about Lack of Patching Leaves 300,000 Routers at Risk for Attack
AWS Among 12 Cloud Services Affected by Flaws in Eltima SDK
Amazon Web Services is among a dozen cloud services affected by flaws in Eltima SDK, according to new reports. The flaws could enable attackers to disable security and gain kernel-level privileges. …
Continue Reading about AWS Among 12 Cloud Services Affected by Flaws in Eltima SDK
Apple Patches 3 More Zero-Days Under Active Attack
Apple has patched three zero-day security vulnerabilities in recently released updates to iOS and macOS that are being actively exploited. One of the flaws could allow an attacker to execute arbitrary …
Continue Reading about Apple Patches 3 More Zero-Days Under Active Attack
HackerOne expands Internet Bug Bounty project to tackle open source bugs
HackerOne will be expanding its Bug Bounty program, seeking to increase overall open source security. Open source projects are relied upon by enterprise players and SMBs alike and can represent some …
Continue Reading about HackerOne expands Internet Bug Bounty project to tackle open source bugs
Payment API Vulnerabilities Exposed “Millions” of Users
According to new information uncovered by CloudSEK, millions of customers may have unknowingly exposed their personal and payment information after researchers discovered API security vulnerabilities …
Continue Reading about Payment API Vulnerabilities Exposed “Millions” of Users
Azure Zero-Day Flaws Highlight Lurking Supply-Chain Risk
Researchers have found a series of vulnerabilities in the Open Management Infrastructure used in Azure on Linux to demonstrate hidden security threats. Researchers have dubbed the flaws OMIGOD. The …
Continue Reading about Azure Zero-Day Flaws Highlight Lurking Supply-Chain Risk