A newly revealed side-channel attack can leak encrypted data from Intel microprocessors that use a Simultaneous Multithreading (SMT) architecture. read more http://feedproxy.google.com/~r/Securityweek/~3/0L9TlL_VPIM/portsmash-new-side-channel-vulnerability-leaks-sensitive-data-intel-chips-CVE..
Tag : Vulnerabilities
Side-channel attacks can pose a serious threat to industrial control systems (ICS), a researcher warned last month at SecurityWeek’s ICS Cyber Security Conference in Atlanta, GA. read more http://feedproxy.google.com/~r/Securityweek/~3/7AOBSYBONhg/ics-devices-vulnerable-side-channel-attacks-..
A serious vulnerability that allows an attacker to steal files from an affected system has been found by a researcher in a building automation product from Swiss-based Fr. Sauter AG. It took the vendor only 10 days to release a patch. read more http://feedproxy.google.com/~r/Securityweek/~3/M0feWehs6Jo/sauter-quickly-patches-flaw-building-automatio..
Enlarge / A Cisco Aironet access point. (credit: Cisco) Millions of Wi-Fi access points sold by Cisco, Meraki, and Aruba have two critical vulnerabilities being patched that could allow hackers to run malware inside the sensitive networks that use the gear. While the flaws open corporate networks to some scary attacks, the real-world likelihood of ..
Millions of access points and other networking devices used by enterprises around the world may be exposed to remote attacks due to a couple of vulnerabilities discovered by researchers in Bluetooth Low Energy (BLE) chips made by Texas Instruments. read more http://feedproxy.google.com/~r/Securityweek/~3/UjjPTNLNQ7o/bluetooth-chip-flaws-expose-enterprises-remo..
Cisco informed customers on Wednesday that some of its security appliances are affected by a serious vulnerability that has been actively exploited. read more http://feedproxy.google.com/~r/Securityweek/~3/LLS7qR23mR0/cisco-warns-zero-day-vulnerability-security-..
Just hours after Apple announced the availability of a new FaceTime feature in iOS, iPhone enthusiast Jose Rodriguez, known for his YouTube channel videosdebarraquito, found a way to bypass a device’s lockscreen by abusing the newly introduced functionality. read more http://feedproxy.google.com/~r/Securityweek/~3/36lLwPDy8Ig/ios-lockscreen-bypass-abuses-new-group-faceti..
Security updates released by Apple on Tuesday for its macOS, iOS, tvOS, watchOS, Safari, iCloud and iTunes products address tens of new vulnerabilities. read more http://feedproxy.google.com/~r/Securityweek/~3/Jj5v1YkNChg/apple-patches-passcode-bypass-facetime..
Malicious actors could cause serious damage to organizations in the energy and water sectors by targeting their human-machine interfaces (HMIs), according to a report released by Trend Micro on Tuesday. read more http://feedproxy.google.com/~r/Securityweek/~3/TfzJm2iPo3Y/internet-exposed-hmis-put-energy-water-facilities-r..
According to new research, 98% of leading companies across the U.S. and Europe are vulnerable to cybercriminals through their web applications. While this figure may seem high, it will surprise neither the companies themselves nor independent security experts. read more http://feedproxy.google.com/~r/Securityweek/~3/5Xm6tytDmLg/92-external-web-apps-have-exploitable-security-flaws-or-weaknes..
