GOautodial, an open source call center software suite with 50,000 users around the world, has patched two vulnerabilities that could lead to information disclosure and remote...
A pair of US identity thieves who targeted elderly people using compromised information bought through dark web cybercrime forums have been sent to prison. Durrell Tyler, 29, and...
The mishandling of HTTP headers left websites built on top of the Symfony platform vulnerable to web cache poisoning attacks. Symfony, a popular PHP framework for web applications,...
A “dormant” webpage belonging to the UK government’s Department of Transport (DfT) has been deleted after it was found to be serving up pornographic content to site visitors....
As international tension ratchets up over Belarus’s authoritarian regime, a hacking group claims to have accessed the full database of those crossing the country’s borders, including...
A security researcher has explained how a weakness in the Amazon Web Services (AWS) API Gateway could be exploited via a HTTP header smuggling attack. Daniel...
Developers of Discourse, the popular open source forum software, have patched a security flaw that could result in an attacker achieving remote code execution (RCE) on vulnerable systems....
Missouri governor Mike Parson has sparked derision among the infosec community over allegations that a journalist who reported a security vulnerability in a state government website had violated...
The rediscovery of vulnerabilities in wireless chip firmware technology from Broadcom has revealed how inherited security flaws can get baked into networking technology. Security researchers at IoT Inspector...
Hackers have released proof-of-concept code that exploits a recently demonstrated vulnerability in older but still widely used versions of Ghostscript, the popular server-side image conversion software package. Security...
Recent Comments