Researchers have demonstrated that the Z-Wave wireless communications protocol, which is used by more than 100 million Internet-of-Things (IoT) devices, is vulnerable to security downgrade attacks. read more http://feedproxy.google.com/~r/Securityweek/~3/ajr3HlW31g8/100-million-iot-devices-possibly-exposed-z-w..
Tag : Vulnerabilities
read more http://feedproxy.google.com/~r/Securityweek/~3/nAJMigkMICM/massive-russia-linked-botnet-raises-concerns-new-atta..
Several critical and high severity vulnerabilities have been found in remote terminal unit (RTU) modules designed for the energy sector and used in various European countries. read more http://feedproxy.google.com/~r/Securityweek/~3/HPnx97GBkYM/vulnerabilities-found-rtus-used-european-en..
The growing demand for faster software delivery, using public cloud environments, microservices, and containers, has triggered a discussion on the role of security in the world of DevOps. read more http://feedproxy.google.com/~r/Securityweek/~3/I8BcHhoEzBM/best-practices-secur..
Several security flaws were recentl..
Two unpatched vulnerabilities in Dasan’s Gigabit-capable Passive Optical Network (GPON) routers are being exploited by Internet of Things (IoT) botnets, security researchers warn. read more http://feedproxy.google.com/~r/Securityweek/~3/CTt0zEhxWs0/botnets-target-zero-days-gp..
VMware informed customers on Monday that updates for its Fusion and Workstation products patch important denial-of-service (DoS) and privilege escalation vulnerabilities. read more http://feedproxy.google.com/~r/Securityweek/~3/R6kE4pIgEDk/vmware-patches-fusion-workstation-vulne..
Intel, AMD, ARM, IBM, Microsoft and other major tech companies on Monday released updates, mitigations and advisories for two new variants of the speculative execution attack methods known as Meltdown and Spectre. read more http://feedproxy.google.com/~r/Securityweek/~3/aiVTpa_-DEo/tech-firms-coordinate-disclosure-new-meltdown-spe..
Dell Patches Local Privilege Escalation in SupportAssist Dell recently addressed a local privilege escalation (LPE) vulnerability in SupportAssist, a tool pre-installed on most of all new Dell devices running Windows. read more http://feedproxy.google.com/~r/Securityweek/~3/EA0Dw2UNf3Y/dell-patches-vulnerability-pre-installed-supportassi..
Several vulnerabilities, including ones rated critical and high severity, have been patched in industrial ethernet switches made by Phoenix Contact, a Germany-based company that specializes in industrial automation, connectivity and interface solutions. read more http://feedproxy.google.com/~r/Securityweek/~3/fjwXA29cNiM/critical-flaws-patched-phoenix-contact-industria..
