Salt Bugs Allow Full RCE as Root on Cloud Servers
Researchers say the bugs are easy to exploit and will likely be weaponized within a day. Continue reading Salt Bugs Allow Full RCE as Root on Cloud Servers
Category Archives: security vulnerabilities
Enterprise Security Woes Explode with Home Networks in the Mix
Thanks to WFH, IoT refrigerators, Samsung TVs and more can now be back-channel proxies into the corporate network. Continue reading Enterprise Security Woes Explode with Home Networks in the Mix
Connected Home Hubs Open Houses to Full Remote Takeover
Users should update their firmware for three popular smart-home hubs. Continue reading Connected Home Hubs Open Houses to Full Remote Takeover
RCE Exploit Released for IBM Data Risk Manager, No Patch Available
Three separate flaws can be chained to achieve full system compromise. Continue reading RCE Exploit Released for IBM Data Risk Manager, No Patch Available
Tencent Ups Top Bug-Bounty Award to $15K
The Chinese ISP has expanded its program via HackerOne. Continue reading Tencent Ups Top Bug-Bounty Award to $15K
Why “Shift Left” in DevOps is really “Shift Center”
In an industry full of acronyms and buzz words, the term “shift left” surfaced as a result of organizations waiting to perform software security testing until the end of the development process. The problem here is that the industry still t… Continue reading Why “Shift Left” in DevOps is really “Shift Center”
A Brisk Private Trade in Zero-Days Widens Their Use
More zero-day exploits coming up for sale by NSO Group and others is democratizing the attack vector and placing them within reach of less sophisticated attackers. Continue reading A Brisk Private Trade in Zero-Days Widens Their Use
WordPress, Apache Struts Attract the Most Bug Exploits
An analysis found these web frameworks to be the most-targeted by cybercriminals in 2019. Continue reading WordPress, Apache Struts Attract the Most Bug Exploits
Microsoft Addresses Active Attacks, Air-Gap Danger with 99 Patches
There are 12 critical and five previously disclosed bugs in the February 2020 Patch Tuesday Update. Continue reading Microsoft Addresses Active Attacks, Air-Gap Danger with 99 Patches
Critical, Unpatched ‘MDhex’ Bugs Threaten Hospital Devices
The Feds have warned on six vulnerabilities in GE medical equipment that could affect patient monitor alarms and more. Continue reading Critical, Unpatched ‘MDhex’ Bugs Threaten Hospital Devices