Vulnerabilities
Vulnerabilities | News, how-tos, features, reviews, and videos
![Windows security and protection [Windows logo/locks]](https://images.idgesg.net/images/article/2018/02/windows_security_safety_protection_encryption_locks_thinkstock_831741980-100749419-medium.3x2.jpg)
ICS security: Popular building management system vulnerable to takeover
Remotely exploitable vulnerability in internet-connected devices gives attackers a means to cause disruption and damage in a wide range of industries.
Popular Avaya enterprise VoIP phones are vulnerable to hacking
Attackers can use the vulnerability to gain complete control of the phone. It underscores the risks of using old open-source code in IoT devices.
New Spectre-like CPU vulnerability bypasses existing defenses
The SWAPGS vulnerability can allow attackers to access contents of kernel memory addresses. Microsoft and Intel have coordinated on a mitigation.
What is a zero day? A powerful but fragile weapon
A zero day is a security flaw that has not yet been patched by the vendor and can be exploited. These vulnerabilities fetch high prices on the black market
Critical VxWorks flaws expose millions of devices to hacking
Researchers have found 11 serious vulnerabilities in VxWorks, the world's most popular real-time operating system (RTOS) that powers over 2 billion devices including enterprise network firewalls and routers, industrial controllers and...
11 top DEF CON and Black Hat talks of all time
Hacker summer camp in Vegas is almost upon us again. Here are some of the best talks of all time. Will this year's talks measure up to these legends?
31 hardware and firmware vulnerabilities: A guide to the threats
Meltdown and Spectre raised the alarm over vulnerabilities that attackers can exploit in popular hardware and its firmware. Here's a roundup of the ones that present the most significant threats.
OpenSSH to protect keys in memory against side-channel attacks
The new OpenSSH patch makes it harder to execute attacks such as Spectre, Meltdown, Rowhammer and Rambleed.
Rowhammer variant RAMBleed allows attackers to steal secrets from RAM
Unlike Rowhammer, which only allows for data corruption, the newly discovered RAMBleed vulnerability provides a way to grab data such as encryption keys from memory.
4 tips for getting the most from threat intelligence
It’s easy to gather data on potential threats, but you have to know what to do with that intelligence if you want to improve your security stance.
How to update your Spectre, Meltdown mitigations for the Retpoline mitigation
Intel recently released a new mitigation for Spectre and Meltdown and some of their variants. Called Retpoline, it might not be enabled with the Windows 10 1809 update. Here's how to find out and implement.
Microsoft urges Windows customers to patch wormable RDP flaw
A newly found vulnerability allows remote exploits using the Remote Desktop Protocol to gain full access to systems with no authentication.
The second Meltdown: New Intel CPU attacks leak secrets
Intel has done some mitigations for these vulnerabilities that can leak secrets from virtual machines, secure enclaves and kernel memory. Here's how the attacks work.
New Intel firmware boot verification bypass enables low-level backdoors
By replacing a PC's SPI flash chip with one that contains rogue code, an attacker can can gain full, persistent access.
Researchers warn of unpatched vulnerability in Oracle WebLogic Server
Detected scans suggest attacker are seeking vulnerable servers to target for attacks.
GandCrab attackers exploit recently patched Confluence vulnerability
If your company uses Confluence, make sure you have the latest available patches for this vulnerability.
Critical Magento SQL injection flaw could be targeted by hackers soon
Popular e-commerce platform Magento has released security patches to fix the flaw. Researchers say update now.
Vulnerability management woes continue, but there is hope
Prioritizing fixes, workflows, and timely patching are just some of the challenges organizations face, but advanced data analytics may help with vulnerability management.
-
White Paper
-
White Paper
-
White Paper
-
White Paper
-
eBook
Sponsored
Most Popular
Sponsored Links