vulnerability

Rockwell Automation industrial energy meter vulnerable to public exploits

February 20, 2019

A low-skilled, remote attacker could use publicly available exploits to gain access to and mess with a power monitor by Rockwell Automation that is used by energy companies …

Flawed password managers allow malware to steal passwords from computer memory

February 20, 2019

The most widely used password managers sport fundamental vulnerabilities that could allow malware to steal the master password or other passwords stored by the software …

Snapd flaw gives attackers root access on Linux systems

February 13, 2019

A vulnerability affecting Snapd – a package installed by default in Ubuntu and used by other Linux distributions such as Debian, OpenSUSE, Arch Linux, Fedora and Solus …

RunC container escape flaw enables root access to host system

February 12, 2019

A serious vulnerability in runC, a widely used CLI tool for spawning and running containers, could be exploited to compromise the runC host binary from inside a privileged …

Malicious macros can trigger RCE in LibreOffice, OpenOffice

February 7, 2019

Achieving remote code execution on systems running LibreOffice or Apache OpenOffice might be as easy as tricking users into opening a malicious ODT (OpenDocument) file and …

The problem with vulnerable IoT companion apps

February 7, 2019

There’s no shortage of exploitable security holes in widely used Internet of Things devices, so it shouldn’t come as a surprise that the communication between many …

Critical FaceTime bug turns iPhones, Macs into eavesdropping tools

January 29, 2019

A shocking and easily exploitable FaceTime bug allows people to listen in on other users of Apple devices by simply calling them through the service. The bug apparently …

Researcher warns of privilege escalation flaw in Check Point ZoneAlarm

January 25, 2019

Illumant researcher Chris Anastasio has discovered a serious vulnerability in Check Point’s security software. It affects ZoneAlarm Free Firewall and ZoneAlarm Free Antivirus …

Cisco fixes security holes in SD-WAN, Webex, Small Business routers

January 24, 2019

Cisco has fixed a heap of security holes in a variety of its products, including a critical one affecting its SD-WAN Solution. Cisco SD-WAN vulnerabilities The most critical …

Bug in widespread Wi-Fi chipset firmware can lead to zero-click code execution

January 21, 2019

A vulnerability in the firmware of a Wi-Fi chipset that is widely used in laptops, streaming, gaming and a variety of “smart” devices can be exploited to …

Researcher releases PoC for Windows VCF file RCE vulnerability

January 16, 2019

A vulnerability that exists in the way Windows processes VCard files (.vcf) can be exploited by remote attackers to achieve execute arbitrary code on vulnerable systems, …

Fortnite vulnerabilities would have allowed attackers to intercept and steal login credentials