Researchers have released a proof-of-concept (PoC) exploit for an actively exploited Windows local privilege escalation vulnerability fixed as part of...
A remote code execution (RCE) vulnerability in the central CocoaPods server could have potentially impacted up to three million mobile apps that relied on the open source package...
A cease-and-desist notice targeting the security researcher who discovered vulnerabilities impacting Xerox printers has been squashed with the removal of a “few extracts of code” in...
Though many people are just paying attention to these problems now, they are not new – and they even date back to ancient Rome. Sorting through...
A vulnerability in Homebrew, the enormously popular open source package manager for macOS and Linux, enabled attackers to execute malicious Ruby code on machines running the application. Security...
Computer scientists who submitted supposed security patches that actually added security vulnerabilities to the Linux kernel have been placed under investigation by their university. Qiushi Wu and Kangjie...
Open Bug Bounty has around 1,300 active bug bounty programs and 22,000 registered security researchers, and is approaching one million coordinated disclosures, resulting in around half a...
As the Covid-19 pandemic places increasing strain on the global supply chain, ransomware attacks on the logistics industry have rocketed. A report published today (April 22) by security services provider...
Games publisher Valve has belatedly resolved a critical security flaw in its popular Steam platform that it was first notified of two years ago. However, a...
WhiteHat Security released AppSec Stats Flash Vol. 4, the latest installment of the company’s monthly report and podcast reflecting on the current state of application security and the wider...
After seven years of malicious activity, law enforcement have managed to seize the infrastructure of the notorious malware variant “Emotet,” and have scheduled a mass uninstallation...
Recent Comments