Cybersecurity specialists reported the detection of multiple critical vulnerabilities in JunOS, the operating system used in many of Juniper Networks’ network solutions. According to the report, successful exploitation of theseRead More →
Although Cisco recognized the detection of 68 vulnerabilities in various router models, the company announced that these flaws will not be corrected since vulnerable devices have reached the end ofRead More →
Facebook has announced the fix of a vulnerability that would have allowed threat actors to post to any page without admin control: “An attacker could share a post in anyRead More →
Microsoft announced the release of a micropatch that fixes a local privilege escalation (LPE) vulnerability in Windows PsExec, the operating system management tool. PsExec functions as a fully interactive TelnetRead More →
A recent report mentions that it is possible to extract the key from BitLocker, an encryption tool on Windows systems, by simply using SPI traffic. Although this attack would requireRead More →
VMware developers have confirmed that their systems were also compromised during the SolarWinds security incident. In its report, the company mentions that threat actors used their unauthorized access to injectRead More →
Valve, a video game developing company, has fixed four critical flaws on Steam, its popular online video game platform. If exploited, these vulnerabilities would allow remote threat actors to blockRead More →
A SpiderLabs researcher has published an analysis of WinZip 24 network communications in which he detected the sending of update verification requests in unencrypted HTTP format. This could allow threatRead More →
A number of firmware flaws in D-Link VPN routers could expose these devices to zero-day attacks exploitation. These vulnerabilities have not been fully fixed, so threat actors could launch rootRead More →