Common Vulnerability Scoring System (CVSS) (Page 4)

Eight critical vulnerabilities in ICS devices allow hackers to take control over access to buildings and lock or unlock doors at will

On: June 10, 2022

Tagged: access control, Carrier LenelS2, Common Vulnerability Scoring System (CVSS), critical infrastructure, cybersecurity, Cybersecurity and Infrastructure Security Agency (CISA), Denial of Service (DDoS), Hacking, Industrial Control System (ICS), Information Security, Internet of Things (IoT), operational technology (OT), remote code execution (RCE), security flaws, technology, vulnerability

Experts from Trellix Threat Labs have shared research on multiple vulnerabilities in an industrial control system (ICS) used to grant physical access to protected facilities, and integrated into building automationRead More →

Vulnerabilities discovered in software used in medical devices for clinical diagnostics and patients’ DNA sequencing would alter the way doctors look for genetic conditions

On: June 3, 2022

In: Vulnerabilities

Tagged: Common Vulnerability Scoring System (CVSS), Cyber Crime, Cyberattack, cybercrime, cybersecurity, Cybersecurity and Infrastructure Security Agency (CISA), Hacking, Illumia, incidents, Information Security, man-in-the-middle (MITM), remote code execution (RCE), security flaws, technology, vulnerability

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) issued a security alert regarding a set of vulnerabilities that would allow malicious hackers to take control of Illumia genetic analysis devices.Read More →

Microsoft confirms that Follina, Office’s zero-day vulnerability, is being exploited by threat actors

On: May 31, 2022

In: Vulnerabilities

Tagged: Common Vulnerability Scoring System (CVSS), Cyberattack, cybercrime, cybersecurity, Follina, Hacking, Information Security, Microsoft, Microsoft Office, Microsoft Word, security flaws, VirusTotal, vulnerability, Windows, Zero-day vulnerability

After a researcher detected a specially crafted Word file to run arbitrary PowerShell on Windows systems, Microsoft confirmed that its operating system is affected by a zero-day vulnerability tracked asRead More →

TP-Link TL-WR840N EU routers can be hacked. Critical vulnerability discovered

On: May 27, 2022

In: Vulnerabilities

Tagged: arbitrary code execution, Common Vulnerability Scoring System (CVSS), Cyberattack, cybercrime, cybersecurity, Hacking, Information Security, Internet of Things (IoT), Routers, security flaws, technology, TP-Link, WiFi

Information security specialists report the detection of a severe vulnerability in the TP-Link TL-WR840N EU routers. According to the report, successful exploitation of this flaw would allow threat actors toRead More →

Predator: The new competitor for Pegasus spyware can hack anyone using Android phones and Chrome browser

On: May 25, 2022

In: Mobile Security

Tagged: Android, Chrome, Common Vulnerability Scoring System (CVSS), cyber spying, Cyberattack, cybercrime, cybersecurity, Google Threat Analysis Group (TAG), Hacking, Information Security, malware, Mobile Security, Pegasus, Predator spyware, security flaws, Spyware

Researchers from Google Threat Analysis Group (TAG) report that in 2021, software development firm Cytrox sold Predator spyware to various hacking groups backed by state actors. These attacks are basedRead More →

Critical vulnerability in Argo CD, a Kubernetes tool, allows attackers to spoof JSON web tokens and become administrators

On: May 24, 2022

In: Vulnerabilities

Tagged: Argo CD, Common Vulnerability Scoring System (CVSS), Cyberattack, cybercrime, cybersecurity, GitOps, Hacking, incidents, Information Security, Kubernetes, privilege escalation, Security breach, security flaws, vulnerability

Maintainers of Argo CD, the continuous delivery (CD) tool for Kubernetes, announced the fix of a vulnerability that would have allowed threat actors to spoof JSON Web Tokens (JWTs) andRead More →

Critical vulnerabilities in VMware Workspace ONE Access, Identity Manager, vRealize Automation, Cloud Foundation, and vRealize Suite Lifecycle Manager enable data theft

On: May 20, 2022

In: Vulnerabilities

Tagged: Common Vulnerability Scoring System (CVSS), Cyberattack, cybercrime, cybersecurity, Cybersecurity and Infrastructure Security Agency (CISA), exploits, Hacking, incidents, Proof of Concept (PoC), technology, VMware, vulnerability

In a recent alert, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) recommends VMware users update or even delete their deployments due to the detection of critical vulnerabilities, exploited justRead More →

Thousands of Zyxel firewalls are vulnerable to remote hacking due to critical vulnerability

On: May 13, 2022

In: Vulnerabilities

Tagged: arbitrary code execution, Common Vulnerability Scoring System (CVSS), Cyberattack, cybercrime, cybersecurity, Firewall, Hacking, Information Security, Rapid7, remote code execution (RCE), security flaws, technology, vulnerability, ZyXEL

Rapid7 cybersecurity specialists report that thousands of Zyxel firewalls could be exposed to remote attacks due to a recently detected vulnerability. While the company has already released the corresponding patches,Read More →

Critical vulnerabilities in Intel Optane SSD and Intel Optane Data Center products

On: May 12, 2022

In: Vulnerabilities

Tagged: Common Vulnerability Scoring System (CVSS), cybersecurity, Denial of Service (DDoS), firmware, Hacking, Information Security, Intel, Intel Optane Data Center, Intel Optane SSD, microprocessors, privilege escalation, security flaws, vulnerability

An Intel security report points to the detection of various memory errors in the firmware of microprocessors used in hundreds of its products. According to the company’s report, these areRead More →