WordPress has rolled out an update to its core codebase that includes mitigations against three security flaws As well as fixing 61 bugs, WordPress 5.8.1, released yesterday (September...
The Open Web Application Security Project (OWASP) has published its draft Top 10 2021 list revealing a shake-up of how modern threats are categorized. In an...
A critical security vulnerability has been disclosed in HAProxy that could be abused by an adversary to possibly smuggle HTTP requests, resulting in unauthorized access to...
Tens of thousands of IceWarp mail server systems remain vulnerable to a troublesome web security vulnerability – despite the fact that the issue was patched last year. Lütfü Mert...
An information disclosure vulnerability has been patched in Ninja Forms, the form-building plugin for WordPress with more than one million active installations. An authenticated attacker who abuses the flaw could...
Effectively mapping supply chains is a critical national security priority. “Amateurs talk about strategy…Professionals talk about logistics,” said U.S. Marine Corps Gen. Robert Barrow when discussing...
The Jenkins project says it has fallen prey to widespread attacks targeting a critical vulnerability in Confluence, Atlassian’s team collaboration software. Attackers compromised Jenkins’ deprecated Confluence...
Hackers have released proof-of-concept code that exploits a recently demonstrated vulnerability in older but still widely used versions of Ghostscript, the popular server-side image conversion software package. Security...
Following our report that certain push-button phones sold in Russia were found to contain backdoors and trojans, the country’s DNS chain of stores, which sells the DEXP...
Netgear has released firmware updates for more than a dozen of its smart switches used on corporate networks to address high-severity vulnerabilities. The company fixed three...