Facebook has announced the fix of a vulnerability that would have allowed threat actors to post to any page without admin control: “An attacker could share a post in anyRead More →
Microsoft announced the release of a micropatch that fixes a local privilege escalation (LPE) vulnerability in Windows PsExec, the operating system management tool. PsExec functions as a fully interactive TelnetRead More →
A recent report mentions that it is possible to extract the key from BitLocker, an encryption tool on Windows systems, by simply using SPI traffic. Although this attack would requireRead More →
VMware developers have confirmed that their systems were also compromised during the SolarWinds security incident. In its report, the company mentions that threat actors used their unauthorized access to injectRead More →
This Sunday SolarWinds presented to the U.S. Securities and Exchange Commission (SEC) the documents detailing a recent security breach that affected Orion Platform, one of the company’s main solutions. However,Read More →
A SpiderLabs researcher has published an analysis of WinZip 24 network communications in which he detected the sending of update verification requests in unencrypted HTTP format. This could allow threatRead More →
A number of firmware flaws in D-Link VPN routers could expose these devices to zero-day attacks exploitation. These vulnerabilities have not been fully fixed, so threat actors could launch rootRead More →
Cisco security teams released multiple security updates to correct newly detected authentication flaws in Cisco Security Manager, whose exploit would allow threat actors to execute malicious code on affected systems.Read More →
A serious cybersecurity incident has been revealed. WhiteHat Jr, an online coding platform targeted for children, has been leaking personal data of over 2.8 million students and teachers. The incidentRead More →