Collaborate Disseminate
Researchers warn of critical vulnerabilities in a third-party industrial component used by top ICS vendors like Rockwell Automation and Siemens. Continue reading Critical Flaws in 3rd-Party Code Allow Takeover of Industrial Control Systems
The critical Intel vulnerability could allow unauthenticated attackers gain escalated privileges on Intel vPro corporate systems. Continue reading Critical Intel Active Management Technology Flaw Allows Privilege Escalation
Five critical cross-site scripting flaws were fixed by Adobe in Experience Manager as part of its regularly scheduled patches. Continue reading Critical Adobe Flaws Allow Attackers to Run JavaScript in Browsers
A researcher discovered a cross-site scripting flaw in Google Map’s export function, which earned him $10,000 in bug bounty rewards. Continue reading Bug in Google Maps Opened Door to Cross-Site Scripting Attacks
Cybersecurity researchers Brian Gorenc and Dustin Childs talk about the biggest vulnerability disclosure challenges in IoT and the industrial vertical. Continue reading Vulnerability Disclosure: Ethical Hackers Seek Best Practices
A phishing campaign uses overlay screens and email ‘quarantine’ policies to steal targets’ Microsoft Outlook credentials. Continue reading Attackers Steal Outlook Credentials Via Overlay Screens on Legitimate Sites
An attacker can execute remote code with no user interaction, thanks to CVE-2020-3495. Continue reading Attackers Can Exploit Critical Cisco Jabber Flaw With One Message
The NSA argued its mass surveillance program stopped terrorist attacks – but a new U.S. court ruling found that this is not, and may have even been unconstitutional. Continue reading NSA Mass Surveillance Program Illegal, U.S. Court Rules
U.S. agencies must implement vulnerability-disclosure policies by March 2021, according to a new CISA mandate. Continue reading U.S. Agencies Must Adopt Vulnerability-Disclosure Policies by March 2021
The six malicious apps have been removed from Google Play, but could still threaten 200,000 installs. Continue reading Joker Spyware Plagues More Google Play Apps