hacking

A group of researchers is trying to insert a payload into vehicle systems, to test if it is possible to make it pass to user's device. Will we see “vehicular” anti-viruses and firewalls in the future?

Cybercrime, APT’s last weapon is the RTF template injection

Proofpoint cybersecurity experts: Groups from India, Russia and China exploit this technique. The files have…

Cybercrime, APT’s last weapon is the RTF template injection

Proofpoint cybersecurity experts: Groups from India, Russia and China exploit this technique. The files have low detection rate by public antivirus.

WordPress, Hashthemes Demo Importer has a critical vulnerability

Wordfence cybersecurity experts: The plugin flaw enables any authorized user to entirely wipe a site…

WordPress, Hashthemes Demo Importer has a critical vulnerability

Wordfence cybersecurity experts: The plugin flaw enables any authorized user to entirely wipe a site clean, erasing all of the material and data posted to it.

Cybersecurity, new zero-day vulnerability on Windows despite the last patch

Abdelhamid Naceri discovered a flaw, which bypass the CVE-2021-41379 security update. It allows a privilege…

Cybersecurity, new zero-day vulnerability on Windows despite the last patch

Abdelhamid Naceri discovered a flaw, which bypass the CVE-2021-41379 security update. It allows a privilege escalation to admin level.

Cybercrime, the Silver Terrier groups: who were yesterday and who are today

Palo Alto Networks Unit 42 cybersecurity experts: In 2021 the BEC gangs reduced their activities,…

Cybercrime, the Silver Terrier groups: who were yesterday and who are today

Palo Alto Networks Unit 42 cybersecurity experts: In 2021 the BEC gangs reduced their activities, but they are still dangerous.

Cybersecurity, Airflow exposed credentials of popular services

Intezer: Misconfigured instances include database passwords, API keys, and cloud credentials. Most of them are…

Cybersecurity, Airflow exposed credentials of popular services

Intezer: Misconfigured instances include database passwords, API keys, and cloud credentials. Most of them are exposed through insecure coding practices.

Cybersecurity, 4 vulnerabilities in Azure VM management extensions OMI agent

Microsoft: They could allow an attacker to raise their privileges and remote arbitrary code execution.…

Cybersecurity, 4 vulnerabilities in Azure VM management extensions OMI agent

Microsoft: They could allow an attacker to raise their privileges and remote arbitrary code execution. Furthermore, there is a PoC online.

Cybersecurity: Zoom introduces E2EE, BYOK and Verified Identity

The company announced the new features to improve security in Meetings and one-on-one conversations.

Cybersecurity: Zoom introduces E2EE, BYOK and Verified Identity

The company announced the new features to improve security in Meetings and one-on-one conversations.

Cybersecurity: here it comes BrakTooth, a bunch of 16 security flaws in Bluetooth stacks

Security Affairs: The vulnerabilities impact 13 chipsets from 11 vendors, and can be exploited to…

Cybersecurity: here it comes BrakTooth, a bunch of 16 security flaws in Bluetooth stacks

Security Affairs: The vulnerabilities impact 13 chipsets from 11 vendors, and can be exploited to execute arbitrary code and crash the devices via DoS attacks.

Cybersecurity, new vulnerability for Exchange Server: PROXYTOKEN

Yoroi: The flaw, CVE-2021-33766, allows a threat actor to monitor, steal or alter corporate email…

Cybersecurity, new vulnerability for Exchange Server: PROXYTOKEN

Yoroi: The flaw, CVE-2021-33766, allows a threat actor to monitor, steal or alter corporate email communications.