The US Cybersecurity and Infrastructure Security Agency (CISA) has added a zero-day flaw affecting Microsoft’s .NET and Visual Studio products to its Known Exploited Vulnerabilities Catalog. The vulnerability, tracked as CVE-2023-38180, was fixed by Microsoft with its August 2023 Patch Tuesday updates, which also address CVE-2023-36884, an Office vulnerability exploited by Russian threat actors. CVE-2023-38180 ..
Tag : Vulnerabilities
Critical vulnerabilities discovered by IoT and industrial cybersecurity firm Claroty in Western Digital (WD) and Synology network-attached storage (NAS) products could have exposed the files of millions of users. The vulnerabilities and their exploitation was demonstrated at the Zero Day Initiative’s Pwn2Own Toronto hacker contest in December 2022, where participants earned a total of nearly ..
For the fourth consecutive year, Microsoft has announced paying out more than $13 million through its bug bounty programs. The tech giant revealed this week that it awarded a total of $13.8 million to 345 researchers from more than 45 countries between July 1, 2022, and June 30, 2023. The money was paid out for ..
Intel on Tuesday released a total of 46 new security advisories to inform customers about 80 vulnerabilities affecting the company’s firmware and software. The most serious of the flaws, based on their CVSS score, are 18 high-severity issues allowing privilege escalation or, in a few cases, denial-of-service (DoS) attacks. The vulnerabilities impact processor BIOS, chipset ..
German software giant SAP has fixed more than a dozen new vulnerabilities with its August 2023 Patch Tuesday updates, including a critical flaw affecting the company’s PowerDesigner data modeling and enterprise architecture product. SAP released 16 new patches and updated several previously released fixes. The critical (HotNews) PowerDesigner flaw, tracked as CVE-2023-37483, is an improper ..
Researchers on Tuesday disclosed the details of a new CPU side-channel attack named Inception that impacts AMD processors. The Inception attack method was discovered by a team of researchers from the ETH Zurich university in Switzerland. It allows a local attacker to leak potentially sensitive data, such as passwords or encryption keys, from anywhere in ..
A month after confirming active exploitation of “a series of remote code execution vulnerabilities” impacting Windows and Office users, Microsoft on Tuesday shipped patches for 33 affected products and a “defense in depth update” to block the attack chain. Redmond’s beleaguered security response team said the pre-patch mitigation stops the attack chain leading to the ..
Adobe on Tuesday rolled out a big batch of security updates for its flagship Acrobat and Reader software, patching at least 30 vulnerabilities affecting Windows and macOS installations. The software maker documented the 30 security defects in a critical-level advisory and warned that successful exploitation could lead to arbitrary code execution, memory leaks, security feature ..
Organizations have been warned about a new potentially serious vulnerability affecting the PaperCut NG/MF print management software. The flaw, tracked as CVE-2023-39143 and rated ‘high severity’, can be exploited by unauthenticated attackers to read or write arbitrary files, which could allow remote code execution in certain configurations of the product. “In particular, the vulnerability affects ..
reader comments 27 with Travel rewards programs like those offered by airlines and hotels tout the specific perks of joining their club over others. Under the hood, though, the digital infrastructure for many of these programs—including Delta SkyMiles, United MileagePlus, Hilton Honors, and Marriott Bonvoy—is built on the same platform. The backend comes from the ..
