The McAfee Advanced Threat Research team (ATR) uncovered a flaw (CVE-2021-33887) in the Android Verified Boot (AVB) process that left the Peloton vulnerable. Peloton products, according to McAfee are equipped with a...
A vulnerability in the Peloton Bike+fitness machine has been fixed that could have allowed a threat actor to gain complete control over the device, including its...
A vulnerability in Microsoft Teams could allow a malicious actor to steal sensitive data and access a victim’s communications, researchers have warned. The bug, which has now been...
Enterprises running VMware’s vCenter Server have been urged to update their systems as new research indicates that around 4,000 instances are still vulnerable to two critical...
Apple has fixed two iOS zero-day vulnerabilities that “may have been actively exploited” to hack into older iPhone, iPad, and iPod devices. The two bugs (tracked as CVE-2021-30761 and CVE-2021-30762)...
A trio of security flaws open the door to remote-code execution and a malware tsunami. The Akkadian Provisioning Manager, which is used as a third-party provisioning...
A security vulnerability in Facebook’s Messenger Rooms video chat feature meant attackers could access a victim’s private Facebook photos and videos, and submit posts, via their locked Android...
GitHub this week disclosed the details of an easy-to-exploit Linux vulnerability that can be leveraged to escalate privileges to root on the targeted system. The flaw,...
The SIP communications protocol can be abused to perform cross-site scripting (XSS) attacks, new research has revealed In a blog post on Thursday (June 10), Enable Security’s Juxhin Dyrmishi Brigjaj...
The board responsible for overseeing the CVE vulnerability identification program has criticized the DWF project for publishing what it says are “unauthorized” CVE records. The Common Vulnerabilities...