exploit

Zerodium offers $2 million for remote iOS jailbreak, $1 million for WhatsApp RCE

January 8, 2019

Zero-day exploit broker Zerodium has raised again the payouts it offers for most desktops/servers and mobile exploits. A “zero click” iOS remote jailbreak is now …

Attackers increasingly exploiting vulnerabilities to enlarge their IoT botnets

December 14, 2018

Attackers looking to add IoT devices to their botnets are increasingly adding vulnerability exploitation to their attack arsenal, Netscout researchers warn. Instead on just …

Adobe patches newly exploited Flash zero-day

December 6, 2018

Adobe has released an out-of-band security update for Flash Player that fixes two vulnerabilities, one of which is a zero-day (CVE-2018-15982) that has been spotted being …

VirtualBox Guest-to-Host escape 0day and exploit released online

November 7, 2018

Independent vulnerability researcher Sergey Zelenyuk has made public a zero-day vulnerability he discovered in VirtualBox, the popular open source virtualization software …

PoC exploit for Windows Shell RCE released

October 12, 2018

Here’s one more reason to hurry with the implementation of the latest Microsoft patches: a PoC exploit for a remote code execution vulnerability that can be exploited …

Popular TP-Link wireless home router open to remote hijacking

October 3, 2018

By concatenating a known improper authentication flaw with a newly discovered CSRF vulnerability, remote unauthenticated attackers can obtain full control over TP-Link …

Python-based attack tools are the most common vector for launching exploit attempts

October 1, 2018

Hackers have an obvious predilection for Python-based attack tools, says Imperva. “When examining the use of Python in attacks against sites we protect, the result was …

Advantech WebAccess RCE flaw still exploitable, exploit code available

September 11, 2018

A vulnerability in Advantech WebAccess, a web browser-based software package for human-machine interfaces (HMI) and supervisory control and data acquisition (SCADA) systems, …

Windows zero-day flaw and PoC unveiled via Twitter

August 28, 2018

A Windows zero-day local privilege escalation flaw and a Proof-of-Concept exploit for it have been revealed on Monday by someone who goes by SandboxEscaper on Twitter. The …

PoC exploit for critical Apache Struts flaw found online

August 27, 2018

The Apache Software Foundation revealed last week the existence of a critical Apache Struts flaw (CVE-2018-11776) similar to the one exploited in the Equifax breach and urged …

Hacking smart plugs to enter business networks

August 23, 2018

McAfee researchers have discovered a buffer overflow flaw in Belkin’s Wemo Insight Smart Plug that can be exploited by attackers to access and interfere with other …

Should we add bugs to software to put off attackers?

August 8, 2018

A group of New York University researchers are testing a new approach to software security: adding more bugs to it instead of removing them. The idea is to “drown …