vulnerability

Vulnerability in code library allows attackers to work out private RSA keys

October 17, 2017

Researchers have discovered a security vulnerability in the Infineon-developed RSA library, which could be exploited by attackers to discover the RSA private key corresponding …

WPA2 weakness allows attackers to extract sensitive info from Wi-Fi traffic

October 16, 2017

WPA2, a protocol that secures modern protected Wi-Fi networks, sports serious weaknesses that can allow attackers to read and capture information that users believe to be …

Unpatched SQLi vulnerability in SmartVista e-commerce suite

October 12, 2017

Companies using SmartVista, the popular e-commerce/payment management product suite developed by Swiss company BPC Banking Technologies, are urged to put limit access to its …

Bugs in Windows DNS client open millions of users to attack

October 10, 2017

In this month’s Patch Tuesday, Microsoft has included fixes for multiple critical memory corruption vulnerabilities in the Windows DNS client, which could be exploited …

Patching discrepancy between supported Windows versions puts users at risk

October 9, 2017

Security improvements should be a welcome addition to all software, but if they are not also simultaneously backported into its older and still supported versions, they can …

PoC for several Magento vulnerabilities released, update now!

October 5, 2017

DefenseCode has published proof of concept code for two CSRF and stored XSS vulnerabilities affecting a number of versions of the popular e-commerce platform Magento. Magento …

Widely used DNS forwarder and DHCP server Dnsmasq riddled with flaws

October 3, 2017

Google researchers have discovered seven serious vulnerabilities in Dnsmasq, a lightweight, widely used DNS forwarder and DHCP server for small computer networks. Dnsmasq is …

Is your Mac software secure but firmware vulnerable?

September 29, 2017

Mac users who have updated to the latest OS version or have downloaded and implemented the most recent security update may not be as secure as they originally thought, Duo …

Spoofed IRS notice delivers RAT through link updating trick

September 22, 2017

The malware delivery trick involving updating links in Word documents is apparently gaining some traction: the latest campaign to use it likely takes the form of fake emails …

Optionsbleed bug makes Apache HTTP Server leak data from memory

September 20, 2017

On Monday, security researcher Hanno Böck detailed a memory-leaking vulnerability in Apache HTTP Server that’s similar to the infamous OpenSSL Heartbleed bug uncovered …

Equifax breach happened because of a missed patch

September 14, 2017

The attackers who breached Equifax managed to do so by exploiting a vulnerability in its US website, the company has finally confirmed. The vulnerability – CVE-2017-5638 …

Patch Tuesday: 80+ vulnerabilities fixed, one exploited in the wild

September 13, 2017

As part of its regular, monthly Patch Tuesday update, Microsoft has released patches for 81 new vulnerabilities, including a zero-day in the .NET Framework. The September …