Vulnerabilities discovered in several medical devices made by the diagnostics division of Swiss-based healthcare company Roche can put patients at risk, a cybersecurity firm has warned.
http://feedproxy.google.com/~r/Securityweek/~3/K0YVWbeRTVU/flaws-roche-medical-devices-can-put-patients-risk
The large number of vulnerabilities found every year has made it increasingly difficult for organizations to effectively prioritize the security holes exposing their applications and networks, according to a new report published on Wednesday by Tenable.
http://feedproxy.google.com/~r/Securityweek/~3/iAt3RBgqkK4/prioritizing-flaws-based-severity-increasingly-ineffective-study
A recently patched remote code execution vulnerability affecting the Adobe ColdFusion web application development platform has been exploited in the wild by one or more threat groups, Volexity warned on Thursday.
http://feedproxy.google.com/~r/Securityweek/~3/Chhuq_SOlpg/adobe-coldfusion-vulnerability-exploited-wild
Updates released this week for the nginx open source web server software address several denial-of-service (DoS) vulnerabilities.
http://feedproxy.google.com/~r/Securityweek/~3/Y86GliFPaZg/several-dos-vulnerabilities-patched-nginx
A default account present in Cisco Small Business switches can allow remote attackers to gain complete access to vulnerable devices. The networking giant has yet to release patches, but a workaround is available.
http://feedproxy.google.com/~r/Securityweek/~3/oMfMxJ8pF3g/default-account-exposes-cisco-switches-remote-attacks
Google this week revealed plans to reach out to critical open source projects and invite them to integrate with OSS-Fuzz.
http://feedproxy.google.com/~r/Securityweek/~3/JjhsST7OCco/google-wants-more-projects-integrated-oss-fuzz
A serious cross-site scripting (XSS) vulnerability discovered in the Evernote application for Windows can be exploited to steal files and execute arbitrary commands.
http://feedproxy.google.com/~r/Securityweek/~3/QlWUlQHDjS0/evernote-flaw-allows-hackers-steal-files-execute-commands
The encryption mechanism used by several types of solid state drives contains vulnerabilities that an attacker could exploit to access encrypted data without knowing a password.
http://feedproxy.google.com/~r/Securityweek/~3/x2nMprs9t9s/researchers-break-full-disk-encryption-popular-ssds
Apache Struts developers are urging users to update a file upload library due to the existence of two vulnerabilities that can be exploited for remote code execution and denial-of-service (DoS) attacks.
http://feedproxy.google.com/~r/Securityweek/~3/woPS_C781oM/apache-struts-users-told-update-vulnerable-component
The United States Air Force on Monday announced that it has launched its third bug bounty program in collaboration with HackerOne.
Hack the Air Force 3.0 is the largest bug bounty program run by the U.S. government to date, spanning 191 countries and lasting more than four weeks.
http://feedproxy.google.com/~r/Securityweek/~3/627XI-EQCYM/us-air-force-announces-third-bug-bounty-program