Collaborate Disseminate
Unlike other speculative execution attacks like Spectre, Retbleed exploits return instructions rather than indirect jumps or calls. Continue reading New speculative execution attack Retbleed impacts Intel and AMD CPUs
The network switch vulnerabilities are considered critical and could allow attackers to break network segmentation, exfiltrate data, and escape captive portals. Continue reading TLS implementation flaws open Aruba and Avaya network switches to RCE attacks
Though not as easy to exploit, this proof of concept shows that some Intel and ARM processors are still vulnerable to side-channel attacks. Continue reading New attack bypasses hardware defenses for Spectre flaw in Intel and ARM CPUs
Attackers can exploit cloud-connected APC Smart-UPS units to take control of the devices they protect. Continue reading Critical flaws in APC uninterruptible power supplies poses risks to mission-critical devices
The Axeda platform, used by hundreds of IoT devices, has seven vulnerabilities, three of which allow for remote code execution. Continue reading Critical flaws in remote management agent impacts thousands of medical devices
Magic WAN and Magic Firewall aim to simplify linking sites and datacenters while allowing organizations to better enforce security policies. Continue reading Cloudflare wants to be your corporate network backbone with centralized management and security
A group believed to be Russia’s Cozy Bear gained access to government and other systems through a compromised update to SolarWinds’ Orion software. Most organizations aren’t prepared for this sort of software supply chain attack. Continue reading SolarWinds attack explained: And why it was so hard to detect
A group believed to be Russia’s Cozy Bear gained access to government and other systems through a compromised update to SolarWinds’ Orion software. Most organizations aren’t prepared for this sort of software supply chain attack. Continue reading SolarWinds attack explained: And why it was so hard to detect
Two vulnerabilities in SAP ASE’s Cockpit component leaves some sensitive information available to anyone on the network and other data susceptible to brute-force attacks. Continue reading SAP ASE leaves sensitive credentials in installation logs
SAP NetWeaver Application Server Java vulnerability can be exploited without authentication and lead to complete system takeover. Patch now. Continue reading Critical flaw allows hackers to breach SAP systems with ease