exploit

If you haven’t yet patched the BlueKeep RDP vulnerability, do so now

May 23, 2019

There is still no public, working exploit code for CVE-2019-0708, a flaw that could allow an unauthenticated remote attacker to execute remote code on a vulnerable target …

WhatsApp flaw used to install spyware by simply calling the target

May 14, 2019

A security vulnerability in the popular Facebook-owned end-to-end encrypted messaging app WhatsApp allowed attackers to install spyware on smartphones without any user …

High-risk vulnerability in Cisco’s secure boot process impacts millions of devices

May 13, 2019

Red Balloon Security has discovered a high-risk vulnerability in Cisco’s secure boot process which impacts a wide range of Cisco products in use among enterprise and …

SharePoint servers under attack through CVE-2019-0604

May 13, 2019

CVE-2019-0604, a critical vulnerability opening unpatched Microsoft SharePoint servers to attack, is being exploited by attackers to install a web shell. The web shell allows …

Flaw in pre-installed software opens Dell computers to remote hijack

May 6, 2019

Dell computer owners should update the Dell SupportAssist software as soon as possible to close a high-risk remote code execution vulnerability. What is Dell SupportAssist? …

50,000 companies running SAP installations open to attack via publicly released exploits

May 2, 2019

Two exploits publicly released in late April at the OPCDE security conference in Dubai could be leveraged to compromise a great number of SAP implementations, Onapsis has …

Attackers actively exploiting Atlassian Confluence and Oracle WebLogic flaws

May 2, 2019

Attackers are actively exploiting recently fixed vulnerabilities in Oracle WebLogic and the Widget Connector macro in Atlassian Confluence to deliver ransomware, mine …

Attackers are weaponizing more vulnerabilities than ever before

April 23, 2019

2018 had the most weaponized vulnerabilities ever (177), which represents a 139% increase compared to 2017, according to the RiskSense latest report. In addition, the rate of …

PoC exploit for Carpe Diem Apache bug released

April 9, 2019

Charles Fol, the security engineer that unearthed the Carpe Diem Apache HTTP Server bug (CVE-2019-0211), has released an exploit for it. “This is between a POC and a …

Magento sites under attack through easily exploitable SQLi flaw

April 8, 2019

A recently patched SQL injection flaw affecting the popular open-source e-commerce platform Magento is being actively exploited by attackers, so if you haven’t …

Consumer routers targeted by DNS hijacking attackers

April 5, 2019

Owners of a slew of D-Link, ARGtek, DSLink, Secutech, TOTOLINK and Cisco consumer routers are urged to update their device’s firmware, lest they fall prey to ongoing DNS …

Google plugs Chrome zero-day exploited in the wild

March 6, 2019

If you’re using Google’s Chrome browser and have not yet upgraded to the latest available version, do so now or risk being hit by attackers. About CVE-2019-5786 …