vulnerability (Page 12)

Citrix Application Delivery Management (ADM) critical vulnerabilities allow taking control of the servers via password reset

On: June 21, 2022

Tagged: Cyberattack, cybersecurity, Information Security, vulnerability

Citrix Application Delivery Management (ADM) is an intuitive, comprehensive platform that enables automation, orchestration, management, and analytics for application delivery across hybrid multi-cloud environments. Citrix ADM offers a web-basedRead More →

How were thousands of liters of petrol/diesel was stolen from different gas stations?

On: June 20, 2022

In: Cyber Security

Tagged: Cyberattack, cybersecurity, incidents, Information Security, vulnerability

Virginia Beach police are investigating an incident in which cyber criminals reportedly hacked into a gas station pump and stole more than $13,600 worth of gasoline. Police said it happenedRead More →

4 Critical Vulnerabilities in Chrome Browser Affect Millions of Users: Update Immediately

On: June 13, 2022

In: Vulnerabilities

Tagged: Common Vulnerability Scoring System (CVSS), Cyberattack, cybersecurity, Google Chrome, Hacking, Information Security, security flaws, use-after-free, vulnerability, Web Browsers

In its latest security alert, Google confirmed the release of updates to address seven vulnerabilities in the Chrome browser, including four bugs considered critical and that could put the millionsRead More →

Researchers discover PACMAN, a new hardware attack to hack Apple Mac devices with M1 chips

On: June 13, 2022

In: Cyber Security

Tagged: Apple, Apple M1, Cyber Crime, Cyberattack, cybercrime, cybersecurity, Hacking, Information Security, memory vulnerability, PACMAN, Pointer Authentication, security flaws, technology, vulnerability

Cybersecurity specialists report the detection of PACMAN, a new hardware vector attack targeting a function of Apple M1 chips that would allow threat actors to execute arbitrary code on affectedRead More →

Eight critical vulnerabilities in ICS devices allow hackers to take control over access to buildings and lock or unlock doors at will

On: June 10, 2022

In: Vulnerabilities

Tagged: access control, Carrier LenelS2, Common Vulnerability Scoring System (CVSS), critical infrastructure, cybersecurity, Cybersecurity and Infrastructure Security Agency (CISA), Denial of Service (DDoS), Hacking, Industrial Control System (ICS), Information Security, Internet of Things (IoT), operational technology (OT), remote code execution (RCE), security flaws, technology, vulnerability

Experts from Trellix Threat Labs have shared research on multiple vulnerabilities in an industrial control system (ICS) used to grant physical access to protected facilities, and integrated into building automationRead More →

Vulnerabilities discovered in software used in medical devices for clinical diagnostics and patients’ DNA sequencing would alter the way doctors look for genetic conditions

On: June 3, 2022

In: Vulnerabilities

Tagged: Common Vulnerability Scoring System (CVSS), Cyber Crime, Cyberattack, cybercrime, cybersecurity, Cybersecurity and Infrastructure Security Agency (CISA), Hacking, Illumia, incidents, Information Security, man-in-the-middle (MITM), remote code execution (RCE), security flaws, technology, vulnerability

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) issued a security alert regarding a set of vulnerabilities that would allow malicious hackers to take control of Illumia genetic analysis devices.Read More →

Critical vulnerability in Microsoft Word and Windows Search allows malware to be downloaded to millions of devices

On: June 3, 2022

In: Vulnerabilities

Tagged: cybersecurity, hackers, Hacking, incidents, Information Security, malicious scripts, Microsoft, Microsoft Office, Microsoft Word, phishing, remote code execution (RCE), technology, vulnerability, Windows Search

Threat actors could exploit a critical zero-day vulnerability in Windows Search to run remotely hosted malware just by automatically opening a search window with a Word document. According to theRead More →

Microsoft confirms that Follina, Office’s zero-day vulnerability, is being exploited by threat actors

On: May 31, 2022

In: Vulnerabilities

Tagged: Common Vulnerability Scoring System (CVSS), Cyberattack, cybercrime, cybersecurity, Follina, Hacking, Information Security, Microsoft, Microsoft Office, Microsoft Word, security flaws, VirusTotal, vulnerability, Windows, Zero-day vulnerability

After a researcher detected a specially crafted Word file to run arbitrary PowerShell on Windows systems, Microsoft confirmed that its operating system is affected by a zero-day vulnerability tracked asRead More →

Critical vulnerabilities in FIDO2 protocols affect Google Titan Key and YubiKey passwordless authentication

On: May 30, 2022

In: Vulnerabilities

Tagged: Apple, authentication, cybersecurity, facebook, Fast Identity Online (FIDO), FIDO Alliance, Google, Google Titan Key, Hacking, incidents, Information Security, Microsoft, passwordless authentication, research, security flaws, technology, vulnerability, YubiKey

Cybersecurity specialists published a report detailing the finding of what they describe as a “design flaw” in the Fast Identity Online (FIDO) passwordless authentication system. The report, titled “Provable SecurityRead More →