Vulnerabilities in the WibuKey Digital Rights Management (DRM) solution could be leveraged to disclose information, elevate privileges, or even execute code on affected systems. Available for many interfaces and operating systems, WibuKey has been used in numerous solutions, including Straton, Archicad, GRAPHISOFT, V-Ray and others. However, Wibu Systems recommends that new projects use another of ..
Tag : Vulnerabilities
The government of Singapore this week announced plans to launch a second bug bounty program in collaboration with hacker-powered security platform HackerOne. The new bug bounty program will be overseen by the Government Technology Agency of Singapore (GovTech), the agency in charge of driving the digital transformation of the country’s public sector, and the Cyber ..
Almost since its inception in October 2016, the UK’s National Cyber Security Centre (NCSC) has been considering how to formalize its vulnerability disclosure process. While the agency has a wider role in strengthening the overall cyber security of UK business, it has a more specific responsibility towards government systems. In March 2017 it announced the ..
The U.S. Defense Department and bug bounty platform HackerOne on Thursday announced the results of Hack the Air Force 3.0. Hack the Air Force 3.0, the third bug bounty program run by the Air Force with assistance from HackerOne, took place between October 19 and November 22. Nearly 30 white hat hackers took part in ..
An out-of-band update released by Microsoft on Wednesday for its Internet Explorer web browser patches a zero-day vulnerability exploited by malicious actors in targeted attacks. Microsoft has credited Clement Lecigne of Google’s Threat Analysis Group for reporting the vulnerability, but neither Microsoft nor Google have shared any details about the attacks involving the flaw. The ..
Hackers could remotely brick servers by launching firmware attacks that involve the Baseboard Management Controller (BMC), researchers at firmware security company Eclypsium have demonstrated. Firmware attacks can pose a serious threat as they allow attackers to gain persistent access and control over a targeted system. However, these types of attacks often require physical access to ..
Researchers discovered that some gateways made by Swiss industrial tech company ABB are affected by potentially serious vulnerabilities, but firmware updates will not be made available by the vendor as the impacted products have reached end of life. Industrial cybersecurity firm Applied Risk published an advisory this week describing two vulnerabilities in Pluto Gateway products ..
The Irish data watchdog on Friday launched an investigation into Facebook, after the social media titan admitted a “bug” may have exposed unposted photos from up to 6.8 million users. The Irish Data Protection Commission (DPC) probe will take place under strict new European privacy laws outlined in the General Data Protection Regulation (GDPR). It ..
Many applications using the popular SQLite database management system could be exposed to attacks due to a potentially serious vulnerability that can lead to remote code execution, information disclosure, and denial-of-service (DoS) attacks. The vulnerability was discovered by researchers of the Blade Team at China-based internet giant Tencent. The experts have named the flaw “Magellan” ..
Facebook revealed on Friday that a bug related to its Photo API could have allowed third-party apps to access users’ photos, even ones that were supposed to be private. According to the social media giant, its internal team discovered a bug in the Photo API that impacted users who had utilized Facebook Login and allowed ..
