Collaborate Disseminate
Ethical hackers so far have earned nearly $300K in payouts from the Apple bug-bounty program for discovering 55 bugs, 11 of them critical, during a three-month hack. Continue reading Wormable Apple iCloud Bug Allows Automatic Photo Theft
Researchers say the bugs are easy to exploit and will likely be weaponized within a day. Continue reading Salt Bugs Allow Full RCE as Root on Cloud Servers
TrickBot victims are being fooled into downloading an app that records their screens – stealing non-SMS 2FA passcodes for banking websites. Continue reading TrickBot App Bypasses Non-SMS Banking 2FA
One flaw found in WordPress plugins Ultimate Addons for Beaver Builder and Ultimate Addons for Elementor is actively being exploited. Continue reading Critical Bug in WordPress Plugins Open Sites to Hacker Takeovers
Attention WordPress users!
Your website could easily get hacked if you are using “Ultimate Addons for Beaver Builder,” or “Ultimate Addons for Elementor” and haven’t recently updated them to the latest available versions.
Security researchers have di… Continue reading Flaw in Elementor and Beaver Addons Let Anyone Hack WordPress Sites
The authentication bypass (CVE-2019-19521) is remotely exploitable. Continue reading OpenBSD Hit with Authentication, LPE Bugs
OpenBSD, an open-source operating system built with security in mind, has been found vulnerable to four new high-severity security vulnerabilities, one of which is an old-school type authentication bypass vulnerability in BSD Auth framework.
The other… Continue reading Severe Auth Bypass and Priv-Esc Vulnerabilities Disclosed in OpenBSD
The flaws in the container technology, CVE-2019-16276 and CVE-2019-11253, are simple to exploit. Continue reading Dangerous Kubernetes Bugs Allow Authentication Bypass, DoS
A U.K. woman alleged that her husband was able to bypass her Samsung Galaxy S10 smartphone’s fingerprint reader when the phone was encased by a third-party screen protector. Continue reading Galaxy S10 Fingerprint Sensor Thwarted With Screen Protector: Report
Trivial-to-exploit authentication flaws can give an unsophisticated remote attacker ‘omnipotent’ control over a server and its contents. Continue reading ‘USBAnywhere’ Bugs Open Supermicro Servers to Remote Attackers