Microsoft recently released an out-of-cycle update that patched previously undisclosed vulnerabilities that allowed an attacker to bypass validation and request credentials from the recipient. The …
Continue Reading about Microsoft Issues Out-of-Cycle SharePoint Update
On Saturday, a team of researchers from Keyfactor presented a vulnerability that they discovered in RSA certificates that could compromise one in every 172 certificates in use. The team presented …
Continue Reading about One in every 172 active RSA certificates are vulnerable to attack
On Thursday, VMware informed customers that it has released an updated version of its software that has patched a vulnerability that allowed for critical remote code execution in ESXi, which was …
Continue Reading about VMware Patches ESXi Vulnerability That Earned Hacker $200,000
WordPress website admins and owners are encouraged to immediately apply the Jetpack 7.9.1 critical security update. Vulnerabilities in Jetpack that could leave websites subject to attack have existed …
Continue Reading about Millions of Sites Exposed by Flaw in Jetpack WordPress Plugin
The latest version of Windows Defender, the built-in anti-malware solution of Windows 10, is affected by a bug that causes Quick or Full scans to stop running after inspecting only a few files. The …
Continue Reading about Windows Defender malware scans are failing after a few seconds
Security researchers have discovered a zero-day privilege escalation flaw in Steam, a highly popular video game distribution platform by Valve. While the vulnerability could pose a serious risk to the …
Continue Reading about Steam Zero-Day Vulnerability Affects Over 100 Million Users
Researchers with McAfee have discovered a critical security flaw in the firmware of the Avaya 9600 series IP desk phone that is used by enterprises, including Fortune 500 companies. The vulnerability …
Continue Reading about Decade-old remote code execution bug found in phones used by Fortune 500
A major vulnerability in popular enterprise resource planning (ERP) software has enabled threat actors to compromise at least 62 colleges in the United States, the US Department of Education recently …
Continue Reading about Over 60 US Colleges Compromised by ERP Exploit
A recent analysis by Errata Security found that nearly one million devices remain vulnerable to the highly critical BlueKeep security flaw that could be used by threat actors to carry out a massive …
Continue Reading about One Million Devices Open to Wormable Microsoft BlueKeep Flaw
Threat actors on Wednesday launched a massive hacking campaign targeting WordPress websites that use the Yuzo Related Posts plugin, a recently discontinued plugin that is vulnerable to a cross-site …
Continue Reading about Mailgun hacked part of massive attack on WordPress sites
