reader comments 23 with 20 posters participating Share this story Sign in with Apple—a privacy-enhancing tool that lets users log into third-party apps without revealing their email addresses—just fixed a bug that made it possible for attackers to gain unauthorized access to those same accounts. “In the month of April, I found a zero-day in ..
Tag : Vulnerabilities
reader comments 43 with 31 posters participating Share this story Users of a widely used firewall from Sophos have been under a zero-day attack that was designed to steal usernames, cryptographically protected passwords, and other sensitive data, officials with the security firm said on Sunday. The well-researched and developed attack exploited a SQL injection flaw ..
reader comments 37 with 30 posters participating Share this story Apple is disputing the accuracy of this week’s report that found attackers have been exploiting an unpatched iOS bug that allowed them to take full control of iPhones. San Francisco-based security firm ZecOps said on Wednesday that attackers had used the zero-day exploit against at ..
reader comments 36 with 22 posters participating Share this story A critical bug that has lurked in iPhones and iPads for eight years appears to be under active attack by sophisticated hackers to hack the devices of high-profile targets, a security firm reported on Wednesday. The exploit is triggered by sending booby-trapped emails that, in ..
Enlarge / A man looks at the home screen for the “new” Windows 7 platform when it was launched in October 2009. Microsoft has ended support, but the OS lives on. reader comments 7 with 6 posters participating Share this story Microsoft has patched three actively exploited vulnerabilities that allow attackers to execute malicious code ..
reader comments 93 with 67 posters participating, including story author Share this story Users of Zoom for Windows beware: the widely used software has a vulnerability that allows attackers to steal your operating system credentials, researchers said. Discovery of the currently unpatched vulnerability comes as Zoom usage has soared in the wake of the coronavirus ..
reader comments 49 with 33 posters participating Share this story Serious vulnerabilities have recently come to light in three WordPress plugins that have been installed on a combined 400,000 websites, researchers said. InfiniteWP, WP Time Capsule, and WP Database Reset are all affected. The highest-impact flaw is an authentication bypass vulnerability in the InfiniteWP Client, ..
Enlarge / Chrome on Windows 10 as it Rickrolls the NSA. reader comments 96 with 64 posters participating, including story author Share this story Less than a day after Microsoft disclosed one of the most critical Windows vulnerabilities ever, a security researcher has demonstrated how attackers can exploit it to cryptographically impersonate any website or ..
reader comments 31 with 29 posters participating, including story author Share this story Mozilla has released a new version of Firefox that fixes an actively exploited zeroday that could allow attackers to take control of users’ computers. In an advisory, Mozilla rated the vulnerability critical and said it was “aware of targeted attacks in the ..
Two local privilege escalation vulnerabilities have been identified by a researcher in an enterprise VPN product from cloud-native networking solutions provider Aviatrix. Aviatrix claims to have over 400 customers worldwide, including companies such as Netflix, United Airlines, Docker, Epsilon, and some major hotel chains. Immersive Labs researcher Alex Seymour discovered that the Aviatrix VPN, which ..
