Vulnerabilities – Threatpost
RSAC 2020: GM’s Transportation Future Hinges on Cybersecurity
CEO Mary T. Barra addressed the high stakes in rolling out self-driving cars and biometric-enhanced…
Read more >>
Vulnerabilities – Threatpost
Billions of Devices Open to Wi-Fi Eavesdropping Attacks
The Kr00k bug arises from an all-zero encryption key in Wi-Fi chips that reveals communications fro…
Read more >>
Vulnerabilities – Threatpost
Google Patches Chrome Browser Zero-Day Bug, Under Attack
Google patches zero-day bug tied to memory corruptions found inside the Chrome browser's open-s…
Read more >>
Vulnerabilities – Threatpost
Apple Takes Heat Over ‘Vulnerable’ iOS Cut-and-Paste Data
Software developer builds a malicious proof-of-concept iOS app that can read data temporarily saved…
Read more >>
Vulnerabilities – Threatpost
Active Attacks Target Popular Duplicator WordPress Plugin
When patched last week, the bug affected at least 1 million websites. Zero-day exploits were going …
Read more >>
Technology
‘Your Workday Is Easier Thanks to His Revolutionary Ideas.’ Computer Scientist Who Created ‘Copy’ and ‘Paste’ Dies
(NEW YORK) — Larry Tesler, the Silicon Valley pioneer who created the now-ubiquitous compu…
Read more >>
Vulnerabilities – Threatpost
Critical Cisco Bug Opens Software Licencing Manager to Remote Attack
A default password would let anyone access the Cisco Smart Software Manager On-Prem Base platform, …
Read more >>
Vulnerabilities – Threatpost
Critical Adobe Flaws Fixed in Out-of-Band Update
Two critical Adobe vulnerabilities have been fixed in Adobe After Effects and Adobe Media Encoder. …
Read more >>
Technology
How TIME Re-created the 1963 March on Washington in Virtual Reality
Tucked away in an office on a quiet Los Angeles street, past hallways chockablock with min…
Read more >>
Vulnerabilities – Threatpost
BlueKeep Flaw Plagues Outdated Connected Medical Devices
More than 55 percent of medical imaging devices - including MRIs, XRays and ultrasound machines - a…
Read more >>
Vulnerabilities – Threatpost
SMS Attack Spreads Emotet, Steals Bank Credentials
A new Emotet campaign is spread via SMS messages pretending to be from banks and may have ties to t…
Read more >>
Vulnerabilities – Threatpost
Iran-Backed APTs Collaborate on 3-Year ‘Fox Kitten’ Global Spy Campaign
APT34/OilRig and APT33/Elfin have established a highly developed and persistent infrastructure that…
Read more >>
Vulnerabilities – Threatpost
Active Exploits Hit Vulnerable WordPress ThemeGrill Plugin
Websites using a vulnerable version of the WordPress plugin, ThemeGrill Demo Importer, are being ta…
Read more >>
Vulnerabilities – Threatpost
Lenovo, HP, Dell Peripherals Face Unpatched Firmware Bugs
A lack of proper code-signing verification and authentication for firmware updates opens the door t…
Read more >>
Vulnerabilities – Threatpost
Huawei Controversy Highlights 5G Security Implications
Security experts say that 5G supply chain concerns should be taken seriously – whether it’s in the …
Read more >>
Technology
Over 1,000 Alleged Oracle Employees Have Signed a Petition Demanding Founder Larry Ellison Cancel a Trump Fundraiser
Oracle founder and CTO Larry Ellison ‘s decision to throw a fundraiser for President Donal…
Read more >>
Technology
The Spring Cleaning Software You Need to Tidy Up Your Computer (And Keep it That Way)
Admit it, you’ve got a ton of junk on your computer. No, not stacked on top of your comput…
Read more >>
Vulnerabilities – Threatpost
500 Malicious Chrome Extensions Impact Millions of Users
The malicious Chrome extensions were secretly collecting users' browser data and redirecting th…
Read more >>
Vulnerabilities – Threatpost
News Wrap: Valentine’s Day Scams and Emotet’s Wi-Fi Hack
Top stories of this week include a new Emotet Wi-Fi hack and Robbinhood ransomware operators using …
Read more >>
Vulnerabilities – Threatpost
Critical WordPress Plugin Bug Afflicts 700K Sites
Researchers are urging users of the GDPR Cookie Consent WordPress plugin to update as soon as possi…
Read more >>
Vulnerabilities – Threatpost
Mozilla Firefox 73 Browser Update Fixes High-Severity RCE Bugs
The release of Firefox 73 fixed high-severity memory safety bugs that could cause arbitrary code ex…
Read more >>
Vulnerabilities – Threatpost
SoundCloud Tackles DoS, Account Takeover Issues
Among other issues, the music platform didn't limit the number of login attempts someone could …
Read more >>
Vulnerabilities – Threatpost
Microsoft Addresses Active Attacks, Air-Gap Danger with 99 Patches
There are 12 critical and five previously disclosed bugs in the February 2020 Patch Tuesday Update.…
Read more >>
Vulnerabilities – Threatpost
Intel Patches High-Severity Flaw in Security Engine
The high-severity vulnerability could enable denial of service, privilege escalation and informatio…
Read more >>
Vulnerabilities – Threatpost
Adobe Addresses Critical Flash, Framemaker Flaws
Overall, Adobe patched flaws tied to 42 CVEs as part of its regularly scheduled updates. Via Vulner…
Read more >>
Vulnerabilities – Threatpost
Dell Patches SupportAssist Flaw That Allows Arbitrary Code Execution
The uncontrolled search path vulnerability allows a local user to use DLLs to escalate privileges a…
Read more >>
Vulnerabilities – Threatpost
BYO-Bug Tactic Attacks Windows Kernel with Outdated Driver
The RobbinHood ransomware is using a deprecated Gigabyte driver as the tip of the spear for taking …
Read more >>
Technology
A Physical Therapist Explains How to Fix Taika Waititi’s Apple Keyboard Woes
At the 2020 Academy Awards, director Taiki Waititi won “Best Adapted Screenplay” for his s…
Read more >>
Technology
Chinese Military Hackers Charged With Stealing Millions of Americans’ Info From Equifax
(WASHINGTON) — Four Chinese military hackers have been charged with breaking into the comp…
Read more >>
Technology
How Artificial Intelligence Could Help Video Gamers Create the Exact Games They Want to Play
For video game fans, the concept of artificial intelligence (AI) is just as familiar as ex…
Read more >>
Vulnerabilities – Threatpost
Critical Android Bluetooth Bug Enables RCE, No User Interaction Needed
The flaw was recently patched in Android's February Security Bulletin. Via Vulnerabilities – Th…
Read more >>
Vulnerabilities – Threatpost
Critical Citrix RCE Flaw Still Threatens 1,000s of Corporate LANs
RCE and myriad other types of attacks could take aim at the 19 percent of vulnerable companies that…
Read more >>
Technology
You Can Finally Stop Netflix From Autoplaying Videos. Here’s How
Using Netflix, until today, had always been an exercise in timing, especially when looking…
Read more >>
Vulnerabilities – Threatpost
Dropbox Passes $1M Milestone for Bug-Bounty Payouts
The file-sharing service also disclosed details of past notable bugs for the first time. Via Vulner…
Read more >>
Vulnerabilities – Threatpost
WhatsApp Bug Allows Malicious Code-Injection, One-Click RCE
A high-severity vulnerability could allow cybercriminals to push malware or remotely execute code, …
Read more >>
Technology
‘There’s a Wide-Open Horizon of Possibility.’ Musicians Are Using AI to Create Otherwise Impossible New Songs
In November, the musician Grimes made a bold prediction. “I feel like we’re in the end of …
Read more >>
