vulnerability

To enable ethical hackers, a law reform is needed

May 9, 2023

Organizations need to be able to match the ingenuity and resources of cybercriminals to better defend themselves against the increasing number of threats and attacks that …

Unattended API challenge: How we’re losing track and can we get full visibility

May 9, 2023

API sprawl is a prevalent issue in modern enterprises, as APIs are being developed and deployed at an unprecedented rate. As highlighted by Postman’s 2022 State of the …

Critical RCE vulnerability in Cisco phone adapters, no update available (CVE-2023-20126)

May 5, 2023

Cisco has revealed the existence of a critical vulnerability (CVE-2023-20126) in the web-based management interface of Cisco SPA112 2-Port Phone Adapters. The adapters are …

Attackers are trying to exploit old DVR vulnerabilities (CVE-2018-9995, CVE-2016-20016)

May 3, 2023

Five years ago, security researcher Fernandez Ezequiel discovered a vulnerability (CVE-2018-9995) in many digital video recorder (DVR) brands and released a tool for …

Easily exploitable flaw in Oracle Opera could spell trouble for hotel chains (CVE-2023-21932)

May 2, 2023

A recently patched vulnerability (CVE-2023-21932) in Oracle Opera, a property management system widely used in large hotel and resort chains, is more critical than Oracle says …

GitHub introduces private vulnerability reporting for open source repositories

April 27, 2023

GitHub has announced that its private vulnerability reporting feature for open source repositories is now available to all project owners. General availability The private …

Common insecure configuration opens Apache Superset servers to compromise

April 26, 2023

An insecure default configuration issue (CVE-2023-27524) makes most internet-facing Apache Superset servers vulnerable to attackers, Horizon3.ai researchers have discovered. …

VMware fixes critical flaws in virtualization software (CVE-2023-20869, CVE-2023-20870)

April 26, 2023

VMware has fixed one critical (CVE-2023-20869) and three important flaws (CVE-2023-20870, CVE-2023-20871, CVE-2023-20872) in its VMware Workstation and Fusion virtual user …

PoC exploit for abused PaperCut flaw is now public (CVE-2023-27350)

April 25, 2023

An unauthenticated RCE flaw (CVE-2023-27350) in widely-used PaperCut MF and NG print management software is being exploited by attackers to take over vulnerable application …

VMware plugs security holes in VMware Aria Operations for Logs (CVE-2023-20864, CVE-2023-20865)

April 24, 2023

VMware has fixed two vulnerabilities (CVE-2023-20864, CVE-2023-20865) in VMware Aria Operations for Logs (formerly vRealize Log Insight), a widely used cloud solution for log …

Study of past cyber attacks can improve organizations’ defense strategies

April 24, 2023

Ransomware operators have been increasingly launching frequent attacks, demanding higher ransoms, and publicly exposing victims, leading to the emergence of an ecosystem that …

Security beyond software: The open source hardware security evolution

April 19, 2023

Mention IT security, and most people immediately think of software-based protections against software-based threats: ransomware, viruses, and other forms of malware. But …