vulnerability

Removing admin rights mitigates most critical Microsoft vulnerabilities

February 23, 2017

Avecto has analyzed the security bulletins Microsoft released in the past year, and came to an important conclusion: an overwhelming majority of all the critical Microsoft …

Qualys app for IBM QRadar offers critical insight into key vulnerability metrics

February 16, 2017

At RSA Conference 2017, Qualys launched a new Qualys App for the IBM QRadar Security Intelligence Platform, which allows customers to visualize their network IT assets and …

Qualys and Bugcrowd bring automation, crowdsourcing to web app security

February 14, 2017

At RSA Conference 2017, Qualys and Bugcrowd announced joint development integrations allowing joint customers the ability to share vulnerability data across automated web …

25% of web apps still vulnerable to eight of the OWASP Top Ten

February 14, 2017

69 percent of web applications are plagued by vulnerabilities that could lead to sensitive data exposure, and 55 percent by cross-site request forgery flaws, the results of a …

Tens of thousands WordPress sites defaced, SEO spam to follow

February 8, 2017

Attackers are actively exploiting the recently patched unauthenticated privilege escalation vulnerability in WordPress’ REST API to deface websites. Sucuri, the company …

Number of disclosed vulnerabilities reaches all time high in 2016

February 6, 2017

A new report shows 2016 broke the previous all-time record for the highest number of reported vulnerabilities. The 15,000 vulnerabilities cataloged during 2016 by Risk Based …

Exploit for Windows DoS zero-day published, patch out on Tuesday?

February 3, 2017

A zero-day bug affecting Windows 10, 8.1, Windows Server 2012 and 2016 can be exploited to crash a vulnerable system and possibly even to compromise it. The bug It is a memory …

Cisco Prime Home flaw allows hackers to reach into people’s homes

February 2, 2017

Cisco has patched a critical authentication bypass vulnerability that could allow attackers to completely take over Cisco Prime Home installations, and through them mess with …

WordPress kept users and hackers in the dark while secretly fixing critical zero-day

February 2, 2017

Last week WordPress released the newest version (4.7.2) of the popular CMS, ostensibly fixing three security issues affecting versions 4.7.1 and earlier. What the WordPress …

Can your Netgear router be hijacked? Check now!

January 31, 2017

Yesterday, researcher Simon Kenin of Trustwave SpiderLabs released information about an authentication bypass flaw affecting a wide variety of Netgear routers, as well as PoC …

The latest on the critical RCE Cisco WebEx extension vulnerability

January 30, 2017

Since Google bug hunter Tavis Ormandy revealed the existence of a remotely exploitable code execution flaw in the Cisco WebEx extension for Google Chrome last week, Cisco has …

Remote attackers can force Samsung Galaxy devices into never-ending reboot loop

January 27, 2017

A single SMS can force Samsung Galaxy devices into a crash and reboot loop, and leave the owner with no other option than to reset it to factory settings and lose all data …