A recently released report from security firm FireEye details how hackers exploit the Background Intelligent Transfer Service (BITS), a legitimate component of Windows systems, to inadvertently install ransomware in vulnerableRead More →
Cybersecurity specialists reported the detection of a critical vulnerability in the popular npm NETMASK library that could affect the more than 278,000 GitHub repositories that depend on this service. NETMASKRead More →
Experts report that major telephone operators in the U.S. have implemented some modifications in the way SMS messages are routed as a method to prevent the exploitation of a flawRead More →
OpenSSL project managers have issued a security alert regarding the finding of two critical vulnerabilities tracked as CVE-2021-3449 and CVE-2021-3450. As you may remember, OpenSSL is a commonly used softwareRead More →
The Thrive Themes developers announced the release of security patches for some flaws in their WordPress plugins and legacy themes, noting that some groups of threat actors could attack someRead More →
A recent Google report mentions that various groups of threat actors are exploiting a vulnerability that affects Android devices with Qualcomm chips. Although the vulnerability was recently corrected, researchers mentionRead More →
Apache Software Foundation developers reported the release of a patch for CVE-2021-26295, a vulnerability whose successful exploitation could allow unauthenticated threat actors to take full control of the ERP systemRead More →
Mobile security specialists warn iOS and Android users about the risks associated with exploiting some zero-day flaws by a group of threat actors. These hackers have been exploiting four flawsRead More →
A group of cybersecurity specialists managed to chain two vulnerabilities to take control of dashboards running MyBB online forum software, widely used by websites around the world. This report wasRead More →