A new Rowhammer attack variant on DRAM devices would allow threat actors to evade the security measures implemented by the manufacturers of these devices after the appearance of the firstRead More →
A few months ago a group of researchers discovered the ChaosDB vulnerability, a severe flaw in the Azure Cosmos DB database solution whose exploitation would allow threat actors to accessRead More →
The team in charge of GoCD announced the fix of three vulnerabilities that could be exploited in a chained manner to take full control of the underlying server. These flawsRead More →
In its latest security alert, Hewlett Packard Enterprise (HPE) confirmed that the data repositories of its Aruba Central software solution were tapped by threat actors, who could access sensitive information.Read More →
After having been the victim of a ransomware attack a few weeks ago, the Toronto Transit Commission (TTC) confirmed that the information of thousands of employees and users could haveRead More →
Palo Alto Networks security team has issued a statement alerting its customers to a remote code execution (RCE) vulnerability in GlobalProtect, mentioning that threat actors can launch malicious code withRead More →
The developers of Apache Storm, an open-source real time data analysis platform, announced the correction of two vulnerabilities whose exploitation would allow remote code execution (RCE) attacks to be deployed.Read More →
In an unprecedented development, major fishing gear company Angling Direct was the target of an unusual cyberattack that resulted in the redirection of its web domain to the popular adultRead More →
This will be a busy week for system administrators, as technology companies Siemens and Schneider Electric announced the release of dozens of security patches to address all sorts of flawsRead More →