Collaborate Disseminate
The rapidly evolving Hoaxcalls botnet is exploiting an unpatched vulnerability in the ZyXEL Cloud CNM SecuManager in a bid to widen its spread. Continue reading Fast-Moving DDoS Botnet Exploits Unpatched ZyXel RCE Bug
CVE-2020-0796 affects version 3.1.1 of Microsoft’s SMB file-sharing system and was not included in Patch Tuesday. Continue reading Wormable, Unpatched Microsoft Bug Threatens Corporate LANs
A lack of proper code-signing verification and authentication for firmware updates opens the door to information disclosure, remote code execution, denial of service and more. Continue reading Lenovo, HP, Dell Peripherals Face Unpatched Firmware Bugs
The list of routers that have critical RCE bugs, that have reached end of life and that won’t get fixed has grown. Continue reading D-Link Adds More Buggy Router Models to ‘Won’t Fix’ List
A patch is currently under revision but has not yet been incorporated into the Linux kernel. Continue reading Four-Year-Old Critical Linux Wi-Fi Bug Allows System Compromise
CVE-2019-16920 allows remote unauthenticated attackers to execute code on a target device. Continue reading D-Link Home Routers Open to Remote Takeover Will Remain Unpatched
An elevation-of-privilege bug allows attackers to run any program on a target machine with high privileges. Continue reading Gamers Beware: Zero-Day in Steam Client Affects All Windows Users
The vulnerability is a decade old with a public exploit, yet remained unpatched in one of the phone giant’s most popular models. Continue reading Critical RCE Bug Found Lurking in Avaya VoIP Phones
Vast majority of Apple iOS users haven’t updated to iOS 12.4, leaving themselves wide open to a public exploit. Continue reading 90% of Enterprise iPhone Users Open to iMessage Spy Attack
The two high-severity bugs impact a wide array of enterprise, military and government networks. Continue reading Pair of Cisco Bugs, One Unpatched, Affect Millions of Devices