Enlarge (credit: Qihoo 360) As browser makers make it increasingly hard to exploit vulnerabilities in Adobe Flash and other plugins, hackers targeting diplomats in the Middle East tried a new approach this month: using Microsoft Office to remotely load Flash content that used a potent zero-day flaw to take control of computers. On Thursday, Adobe ..
Tag : Vulnerabilities
Researchers have discovered serious vulnerabilities in patient monitoring devices from Philips. The vendor has shared some recommendations for mitigating the risks until patches are made available. read more http://feedproxy.google.com/~r/Securityweek/~3/u3KSTRx8-6o/serious-flaws-found-philips-patient-monitori..
[Updated] Security updates released by Adobe on Thursday for Flash Player patch four vulnerabilities, including a critical flaw that has been exploited in targeted attacks. read more http://feedproxy.google.com/~r/Securityweek/~3/cP1EmGTExnE/adobe-patches-flash-zero-day-exploited-targeted..
Enlarge (credit: Malwarebytes) More than 115,000 websites—many run by major universities, government organizations, and media companies—remained wide open to hacker takeovers because they hadn’t installed critical patches released 10 weeks ago, security researcher Troy Mursch said Monday. A separate researcher reported on Tuesday that many of the sites were already compromised and were being used ..
Mirai is the archetypal IoT botnet, first achieving infamy with a 665 Gbps DDoS attack against the KrebsOnSecurity website in September 2016. Within days, a second Mirai attack targeted the French hosting firm, OVH, with an attack that peaked at nearly 1 Tbps. read more http://feedproxy.google.com/~r/Securityweek/~3/qzcdlaQmuec/mirai-variants-continue-spawn-vulnerable-iot..
A critical vulnerability affecting many consumer and corporate products from F-Secure could have been exploited for remote code execution using specially crafted archive files. read more http://feedproxy.google.com/~r/Securityweek/~3/JBIZS4Ed2Sk/flaw-f-secure-products-allowed-code-execution-maliciou..
At least 115,000 websites powered by version 7 of the Drupal content management system are still vulnerable to Drupalgeddon2 attacks, despite patches being available since late March. read more http://feedproxy.google.com/~r/Securityweek/~3/PSj38Vgjmz8/many-drupal-sites-still-vulnerable-drupalgeddo..
Apple has released a set of updates to address dozens of vulnerabilities in products including macOS, iOS, Safari, tvOS, watchOS, and iTunes and iCloud applications for Windows. read more http://feedproxy.google.com/~r/Securityweek/~3/QAckkESxMWg/apple-patches-dozens-flaws-macos-..
Researchers at Core Security say they have discovered a total of more than 60 vulnerabilities in disk backup and system management appliances from Quest. The IT management firm has released patches, but threatened to take legal action against Core if it disclosed too many details. read more http://feedproxy.google.com/~r/Securityweek/~3/dI7-CPNinhE/tens-vulnerabilities-found-quest-..
Researchers discovered vulnerabilities in ten WordPress plugins made by a company for e-commerce websites powered by the WooCommerce platform. WordPress disabled many of them after the developer failed to release patches. read more http://feedproxy.google.com/~r/Securityweek/~3/S7g13A7qDGw/wordpress-disables-plugins-expose-e-commerce-sit..
