Collaborate Disseminate
An authentication bypass vulnerability leading to remote code execution offers up the keys to the corporate kingdom. Continue reading Zoho Password Manager Zero-Day Bug Under Active Attack Gets a Fix
The Demon’s Cries, Draconian Fear and Seventh Inferno security bugs are high-severity entryways to corporate networks. Continue reading Netgear Smart Switches Open to Complete Takeover
Patch now: The popular biz-collaboration platform is seeing mass scanning and exploitation just two weeks after a critical RCE bug was disclosed. Continue reading Jenkins Hit as Atlassian Confluence Cyberattacks Widen
The first half of 2021 saw 1.5 billion attacks on smart devices, with attackers looking to steal data, mine cryptocurrency or build botnets. Continue reading IoT Attacks Skyrocket, Doubling in 6 Months
The financially motivated group looked to steal payment-card data from a California-based point-of-sale service provider. Continue reading FIN7 Capitalizes on Windows 11 Release in Latest Gambit
The BrakTooth set of security vulnerabilities impacts at least 11 vendors’ chipsets. Continue reading Bluetooth Bugs Open Billions of Devices to DoS, Code Execution
A design flaw involving Google Timeline could allow someone to track another device without installing a stalkerware app. Continue reading Google Play Sign-Ins Allow Covert Location-Tracking
Users should be careful whose pics they view and should, of course, update their apps. Continue reading WhatsApp Photo Filter Bug Allows Sensitive Info to Be Lifted
Two vulnerabilities in the site-building plugin could be useful tools in the hands of a skilled attacker, researchers warned. Continue reading Gutenberg Template Library & Redux Framework Bugs Plague WordPress Sites
A pair of unpatched security vulnerabilities can allow unauthenticated cyberattackers to turn off window, door and motion-sensor monitoring. Continue reading Fortress Home Security Open to Remote Disarmament