Adobe on Monday released updates for the Windows and macOS versions of its Acrobat products to address tens of vulnerabilities, including critical issues that allow arbitrary code execution.
http://feedproxy.google.com/~r/Securityweek/~3/YzdP8L8VQ-k/adobe-patches-85-vulnerabilities-acrobat-products
http://feedproxy.google.com/~r/Securityweek/~3/3kjlNST-Hds/several-bugs-exploited-massive-facebook-hack
After being observed targeting smart homes just two months ago, the Hide ‘N Seek Internet of Things (IoT) botnet is now capable of infecting Android devices.
http://feedproxy.google.com/~r/Securityweek/~3/TXV-Iy8zdq8/hide-n-seek-iot-botnet-now-targets-android-devices
An uncorrected security flaw in a vote-counting machine used in 23 U.S states leaves it vulnerable to hacking 11 years after the manufacturer was alerted to it, security researchers say.
http://feedproxy.google.com/~r/Securityweek/~3/9Ml51-BBrHM/researchers-11-year-old-flaw-vote-scanner-still-unfixed
ICS-CERT and Trend Micro’s Zero Day Initiative (ZDI) this week disclosed the existence of several unpatched vulnerabilities affecting servo systems and drives from Japanese electrical equipment company Fuji Electric.
http://feedproxy.google.com/~r/Securityweek/~3/dS09t3MfFcc/no-patches-critical-flaws-fuji-electric-servo-system-drives
Google Project Zero this week disclosed the details and released a proof-of-concept (PoC) exploit for a potentially serious Linux kernel vulnerability.
http://feedproxy.google.com/~r/Securityweek/~3/QNPWOjpy0gE/google-project-zero-discloses-new-linux-kernel-flaw
Data from vulnerability assessments conducted by security consulting firm IOActive in the past years shows some improvements in vehicle cybersecurity.
http://feedproxy.google.com/~r/Securityweek/~3/MMWuEhyipr4/researchers-see-improvements-vehicle-cybersecurity
Qualys has disclosed the details of an integer overflow vulnerability in the Linux kernel that can be exploited by a local attacker for privilege escalation. The flaw, dubbed “Mutagen Astronomy,” affects certain versions of the Red Hat, CentOS and Debian distributions.
http://feedproxy.google.com/~r/Securityweek/~3/L4Q8tpdPd-s/linux-kernel-vulnerability-affects-red-hat-centos-debian
The United States General Service Administration’s (GSA) Technology Transformation Service (TTS) has launched a bug bounty program on HackerOne, the hacker-powered security platform announced on Friday.
http://feedproxy.google.com/~r/Securityweek/~3/GwbhyzZREec/us-general-service-administration-launches-bug-bounty-program
A critical vulnerability recently patched in the Cisco Video Surveillance Manager (VSM) could allow an unauthenticated attacker to log in as root.
http://feedproxy.google.com/~r/Securityweek/~3/r25MO2qp_E0/cisco-removes-default-password-video-surveillance-manager