Vulnerabilities discovered in several medical devices made by the diagnostics division of Swiss-based healthcare company Roche can put patients at risk, a cybersecurity firm has warned. read more http://feedproxy.google.com/~r/Securityweek/~3/K0YVWbeRTVU/flaws-roche-medical-devices-can-put-pat..
Tag : Vulnerabilities
The large number of vulnerabilities found every year has made it increasingly difficult for organizations to effectively prioritize the security holes exposing their applications and networks, according to a new report published on Wednesday by Tenable. read more http://feedproxy.google.com/~r/Securityweek/~3/iAt3RBgqkK4/prioritizing-flaws-based-severity-increasingly-ineffec..
A recently patched remote code execution vulnerability affecting the Adobe ColdFusion web application development platform has been exploited in the wild by one or more threat groups, Volexity warned on Thursday. read more http://feedproxy.google.com/~r/Securityweek/~3/Chhuq_SOlpg/adobe-coldfusion-vulnerability-expl..
Updates released this week for the nginx open source web server software address several denial-of-service (DoS) vulnerabilities. read more http://feedproxy.google.com/~r/Securityweek/~3/Y86GliFPaZg/several-dos-vulnerabilities-pat..
A default account present in Cisco Small Business switches can allow remote attackers to gain complete access to vulnerable devices. The networking giant has yet to release patches, but a workaround is available. read more http://feedproxy.google.com/~r/Securityweek/~3/oMfMxJ8pF3g/default-account-exposes-cisco-switches-remo..
Google this week revealed plans to reach out to critical open source projects and invite them to integrate with OSS-Fuzz. read more http://feedproxy.google.com/~r/Securityweek/~3/JjhsST7OCco/google-wants-more-projects-integrate..
A serious cross-site scripting (XSS) vulnerability discovered in the Evernote application for Windows can be exploited to steal files and execute arbitrary commands. read more http://feedproxy.google.com/~r/Securityweek/~3/QlWUlQHDjS0/evernote-flaw-allows-hackers-steal-files-execut..
The encryption mechanism used by several types of solid state drives contains vulnerabilities that an attacker could exploit to access encrypted data without knowing a password. read more http://feedproxy.google.com/~r/Securityweek/~3/x2nMprs9t9s/researchers-break-full-disk-encryption-po..
Apache Struts developers are urging users to update a file upload library due to the existence of two vulnerabilities that can be exploited for remote code execution and denial-of-service (DoS) attacks. read more http://feedproxy.google.com/~r/Securityweek/~3/woPS_C781oM/apache-struts-users-told-update-vulnerable..
The United States Air Force on Monday announced that it has launched its third bug bounty program in collaboration with HackerOne. Hack the Air Force 3.0 is the largest bug bounty program run by the U.S. government to date, spanning 191 countries and lasting more than four weeks. read more http://feedproxy.google.com/~r/Securityweek/~3/627XI-EQCYM/us-air-force-announces-third-bug-boun..
