Apple Patches Three Actively Exploited Zero-Days, Part of iOS Emergency Update
An anonymous researcher identified bugs in the software’s kernel and WebKit browser engine that are likely part of an exploit chain.
Read More
Vulnerabilities
Nvidia Squashes High-Severity Jetson DoS Flaw
If exploited, the most serious of these flaws could lead to a denial-of-service condition for Jetson products.
Read MoreNefilim Ransomware Gang Hits Jackpot with Ghost Account
An unmonitored account belonging to a deceased employee allowed Nefilim to exfiltrate data and infiltrate systems for a month, without being noticed.
Read MoreNorth Korea Targets Security Researchers in Elaborate 0-Day Campaign
Hackers masquerade as security researchers to befriend analysts and eventually infect fully patched systems at multiple firms with a malicious backdoor.
Read MoreTikTok Flaw Lay Bare Phone Numbers, User IDs For Phishing Attacks
A security flaw in TikTok could have allowed attackers to query query the platform’s database – potentially opening up for privacy violations.
Read MoreTikTok Flaw Lay Bare Phone Numbers, User IDs For Phishing Attacks
A security flaw in TikTok could have allowed attackers to query query the platform’s database – potentially opening up for privacy violations.
Read MoreCisco DNA Center Bug Opens Enterprises to Remote Attack
The high-severity security vulnerability (CVE-2021-1257) allows cross-site request forgery (CSRF) attacks.
Read MoreCisco DNA Center Bug Opens Enterprises to Remote Attack
The high-severity security vulnerability (CVE-2021-1257) allows cross-site request forgery (CSRF) attacks.
Read MoreSonicWall Breach Stems from ‘Probable’ Zero-Days
The security vendor is investigating potential zero-day vulnerabilities in its Secure Mobile Access (SMA) 100 series.
Read MoreAmazon Kindle RCE Attack Starts with an Email
The “KindleDrip” attack would have allowed attackers to siphon money from unsuspecting victims.
Read More