Google has announced a new experimental Abuse Research Grants Program for abuse-related tactics and product issues outside the scope of existing Vulnerability Research Grants and the...
Korenix has patched multiple vulnerabilities in a range of devices used across critical infrastructure industries. Korenix Technologies, a subsidiary of Sweden-based Beijer Electronics, manufactures wired and wireless products...
Up to a third of all security flaws reported to organizations with no vulnerability disclosure policy (VDP) are not being patched due to failings in the disclosure process,...
A remote code execution (RCE) vulnerability in the client application of Overwolf, the popular gaming development platform, has been patched. The critical flaw (CVE-2021-33501), which has a CVSS...
A newly discovered threat group, Agrius, has been launching damaging wiper attacks aimed at Israeli targets. The malware is masquerading as ransomware to make its state-sponsored...
The bug in HPE SIM makes it easy as pie for attackers to remotely trigger code, no user interaction necessary. Hewlett Packard Enterprise (HPE) has fixed...
SonicWall urges customers to ‘immediately’ patch a post-authentication vulnerability impacting on-premises versions of the Network Security Manager (NSM) multi-tenant firewall management solution. The vulnerability tracked as CVE-2021-20026 affects...
Hewlett Packard Enterprise (HPE) has released a security update to address a zero-day remote code execution vulnerability in the HPE Systems Insight Manager (SIM) software, disclosed...
Offices of multiple Japanese agencies were breached via Fujitsu’s “ProjectWEB” information sharing tool. Fujitsu states that attackers gained unauthorized access to projects that used ProjectWEB, and stole some customer...
Security researchers have traced an argument injection vulnerability in content management systems (CMS) to flaws in Ruby Gem Dragonfly, an image handling library. New Zealand security consultancy ZX Security...
Recent Comments