Connect with us
Computer scientists who submitted supposed security patches that actually added security vulnerabilities to the Linux kernel have been placed under investigation by their university. Qiushi Wu and Kangjie...
Open Bug Bounty has around 1,300 active bug bounty programs and 22,000 registered security researchers, and is approaching one million coordinated disclosures, resulting in around half a...
Games publisher Valve has belatedly resolved a critical security flaw in its popular Steam platform that it was first notified of two years ago. However, a...
WhiteHat Security released AppSec Stats Flash Vol. 4, the latest installment of the company’s monthly report and podcast reflecting on the current state of application security and the wider...
FireEye has released details of zero-day vulnerabilities in SonicWall’s Email Security software which allowed attackers to obtain access to corporate networks and install backdoors on victim devices. In...
Miscreants are exploiting a newly-discovered vulnerability in the Nagios XI network monitoring software to run crypto-mining malware. The CVE-2021-25296 remote command injection vulnerability is being abused to deploy the XMRig...
Pulse Secure has shared mitigation measures for a zero-day authentication bypass vulnerability in the Pulse Connect Secure (PCS) SSL VPN appliance actively exploited in attacks against...
QNAP Systems has patched a pair of critical security vulnerabilities that could allow unauthenticated attackers to take control of its network-attached storage (NAS) devices. The flaws,...
Developers have fixed a serious web security flaw in a debug toolbar for the popular Django framework. The CVE-2021-30459 vulnerability in the open source Django Debug Toolbar arises...
Cybersecurity provider Juniper Networks addressed a critical vulnerability that could be exploited by attackers to remotely hijack or disrupt vulnerable devices. Cybersecurity vendor Juniper Networks addressed...
