A team of researchers has demonstrated that Intel’s SGX technology can be abused to hide an advanced and stealthy piece of malware that could allow attackers to steal data and conduct activities on the victim’s behalf. Intel says its technology works as intended and it’s not designed to block these types of attacks. Michael Schwarz, ..
Tag : Vulnerabilities
Getty Images | Justin Sullivan reader comments 37 with 22 posters participating Share this story Microsoft’s Patch Tuesday this month had higher-than-usual stakes with fixes for a zero-day Internet Explorer vulnerability under active exploit and an Exchange Server flaw that was disclosed last month with proof-of-concept code. The IE vulnerability, Microsoft said, allows attackers to ..
Microsoft’s Patch Tuesday updates for February 2019 address more than 70 vulnerabilities, including an Internet Explorer flaw that Google researchers have spotted being exploited in attacks. This zero-day vulnerability is tracked as CVE-2019-0676 and it has been described by Microsoft as an information disclosure issue that exists due to the way Internet Explorer handles objects ..
Adobe on Tuesday released patches for Acrobat and Reader, Flash Player, ColdFusion and Creative Cloud. One of the Reader flaws is a critical data leakage issue whose details were made public by a researcher in January. The company has resolved a total of 71 vulnerabilities in Acrobat and Reader products. One of them has been ..
A vulnerability recently addressed in runc could allow malicious containers to gain root-level code execution on the host. Introduced in 2015, runc is a lightweight, portable container runtime that includes all of the code used by Docker to interact with system features related to containers. The runtime is used in most containers out there, including ..
Tenable on Monday announced the general availability of a new service designed to help organizations identify the vulnerabilities that have the highest likelihood of being exploited. Predictive Prioritization is currently available for Tenable customers using the Tenable.sc on-premises vulnerability management solution, but it will be added to Tenable.io, the cloud-based version, later this year. The ..
LONDON (AP) — When mysterious operatives lured two cybersecurity researchers to meetings at luxury hotels over the past two months, it was an apparent bid to discredit their research about an Israeli company that makes smartphone hacking technology used by some governments to spy on their citizens. The Associated Press has now learned of similar ..
The stunning revelation that a tabloid obtained below-the-belt selfies of Amazon founder Jeff Bezos — the world’s richest man — suggests that even billionaires are not out of the reach of hackers. Bezos came out fighting this week, accusing the National Enquirer of blackmailing him with lurid pictures of him and his mistress, and pre-empting ..
Thousands of instances of a temperature control system are exposed to remote attacks from the internet due to users’ failure to change default passwords and implement other security measures. Researchers from Safety Detective discovered recently that refrigeration systems made by Resource Data Management (RDM), a Scotland-based provider of control and monitoring solutions, can be easily ..
Mozilla is getting ready to boost the security of Firefox users with the addition of Site Isolation in the not too distant future. Dubbed Project Fission, the initiative aims to split cross-site iframes into different processes than their parent frame, marking a major step in the evolution of Firefox’s process model. The goal, Mozilla developer ..
