Tara Seals, Author at AZGAD WEBSITE SECURITY BLOG

Two vulnerabilities in the site-building plugin could be useful tools in the hands of a skilled attacker, researchers warned.

Fortress Home Security Open to Remote Disarmament

A pair of unpatched security vulnerabilities can allow unauthenticated cyberattackers to turn off window, door and motion-sensor monitoring.

The popular Dynamic Pricing and Discounts plugin from Envato can be exploited by unauthenticated attackers.

The bug (CVE-2021-33766) is an information-disclosure issue that could reveal victims’ personal information, sensitive company data and more.

It’s unclear if Microsoft customers were breached during the months-long period where the #ChaosDB bug in Jupyter Notebooks was exploitable.

The issue affects a range of Cisco Wireless-N and Wireless-AC VPN routers that have reached end-of-life.

The apps attempt to swindle users into buying in-app upgrades or clicking on masses of ads.

The OS command-injection bug, in the web application firewall (WAF) platform known as FortiWeb, will get a patch at the end of the month.

Fresh attacks target companies’ employees, promising millions of dollars in exchange for valid account credentials for initial access.

The bug would allow a number of malicious actions, up to and including full site takeover. The vulnerable plugin is installed on 100,000 websites.