Researchers discovered several vulnerabilities in Sophos SafeGuard full-disk and file encryption products. The flaws allow an attacker to escalate privileges on a compromised device and execute arbitrary code with SYSTEM permissions.
http://feedproxy.google.com/~r/Securityweek/~3/U5Dj8iw6rYw/sophos-patches-privilege-escalation-flaws-safeguard-products
A team of researchers has demonstrated that specially crafted batteries installed in a smartphone can allow malicious actors to harvest and exfiltrate sensitive information.
http://feedproxy.google.com/~r/Securityweek/~3/B-Wzj3mZAhc/mobile-devices-exposed-spying-malicious-batteries-researchers
In April, at SecurityWeek’s ICS Cyber Security Conference in Singapore, industrial cybersecurity firm Applied Risk disclosed the details of a serious denial-of-service (DoS) vulnerability affecting safety controllers from several major vendors.
http://feedproxy.google.com/~r/Securityweek/~3/D5IiQqkksMc/rockwell-patches-flaw-affecting-safety-controllers-several-vendors
Oracle announced on Friday that it has started releasing software and microcode updates for products affected by the recently disclosed variants of the Spectre and Meltdown vulnerabilities.
http://feedproxy.google.com/~r/Securityweek/~3/VuSX6olCjqk/oracle-patches-new-spectre-meltdown-vulnerabilities
http://feedproxy.google.com/~r/Securityweek/~3/MwPRbzeLLs4/wavethrough-bug-microsoft-edge-leaks-sensitive-information
Network attacks exploiting a recently patched Drupal vulnerability are attempting to drop Monero mining malware onto vulnerable systems, Trend Micro reports.
http://feedproxy.google.com/~r/Securityweek/~3/ZvEEw4di6Gw/hackers-exploit-drupal-flaw-monero-mining
Cisco on Wednesday released patches for more than 30 security vulnerabilities in its products, including Critical flaws impacting NX-OS Software.
http://feedproxy.google.com/~r/Securityweek/~3/wUPKsLN6pAo/cisco-patches-critical-flaws-nx-os-software
Cybersecurity start-up NanoLock Security today announced a new lightweight security platform designed to add security into the small connected devices better known as the internet of things, rather than to overlay security around those devices.
http://feedproxy.google.com/~r/Securityweek/~3/VehMUdgmdf4/nanolock-launches-platform-protect-iot-devices-production-through-end-life
A newly discovered attack against Google Home and Chromecast devices can reveal a user’s precise physical location, a security researcher has discovered.
http://feedproxy.google.com/~r/Securityweek/~3/oHGxC0Af39U/google-devices-leak-precise-physical-locations-researcher
Roughly 400 security cameras from Axis Communications are affected by several vulnerabilities, including critical flaws that can be chained to take complete control of a device and access its video stream.
http://feedproxy.google.com/~r/Securityweek/~3/h2g08TvoUEQ/critical-flaws-expose-400-axis-cameras-remote-attacks