Category Archives: Vulnerabilities

You are here:

Home
Category "Vulnerabilities"

Zero-Day No More: Windows Bug Gets a Fix

0patch, Local Privilege Escalation, micropatch, sandboxescaper, Task Scheduler, Vulnerabilities, vulnerability, Windows, zero dayBy Jeremy McClure June 4, 2019

0patch has released an interim micropatch for the dangerous LPE bug from SandboxEscaper, while we wait for Microsoft’s official patch. Zero-Day No More: Windows Bug Gets a Fix

AI Isn’t Good Enough When Lives Are on the Line, Experts Warn

ai, artificial intelligence, cyber warfare, Government, Hacks, infosecurity Europe, nation state, VulnerabilitiesBy Jeremy McClure June 4, 2019

During Infosecurity Europe in London this week, cybersecurity experts sounded off on worries about artificial intelligence being used for nation state cyber weapons. AI Isn’t Good Enough When Lives Are on the Line, Experts Warn

Smart-TV Bug Allows Rogue Broadcasts

Bug, Cloud Security, CVE-2019-12477, Dhiraj Mishra, emergency messages, Hacks, hijacking, IoT, rogue broadcast content, supra smart tv, Vulnerabilities, vulnerabilityBy Jeremy McClure June 3, 2019

An attacker could gain remote access by chaining together an exploit for home routers with the TV flaw. Smart-TV Bug Allows Rogue Broadcasts

Bugs in Grandstream Gear Lay Open SMBs to Range of Attacks

conferencing, Eavesdropping, grandstream, ip pbx, IP phones, Malware, Patches, SMB, TrustWave, Vulnerabilities, Web SecurityBy Jeremy McClure March 25, 2019

Attackers can remotely compromise multiple network devices (IP PBX, conferencing gear and IP phones), installing malware and eavesdropping via video and audio functions. Bugs in Grandstream Gear Lay Open SMBs to Range of Attacks

Firefox and Edge Fall to Hackers on Day Two of Pwn2Own

breach, CanSecWest, Hacks, Hypervisor, JIT bug, Microsoft Edge browser, Mozilla Firefox browser, pwn2own 2019, pwn2own competition, vmware, VMware Workstation, VulnerabilitiesBy Jeremy McClure March 22, 2019

Browsers Firefox and Edge take a beating on day two of the Pwn2Own competition. Firefox and Edge Fall to Hackers on Day Two of Pwn2Own

Critical DoS Bug Bubbles Up in Facebook Fizz TLS 1.3 Project

Denial of Service, facebook fizz, Integer Overflow, semmle, Vulnerabilities, vulnerability, Web SecurityBy Jeremy McClure March 22, 2019

Users of the open-source project should upgrade immediately. Critical DoS Bug Bubbles Up in Facebook Fizz TLS 1.3 Project

Medtronic Defibrillators Have Critical Flaws, Warns DHS

Critical Infrastructure, critical vulnerability, defibrillator security, Medical device security, medical security, Medtronics, protocol, VulnerabilitiesBy Jeremy McClure March 22, 2019

The unpatched vulnerabilities exist in 20 products made by the popular Medtronics medical device manufacturer, including defibrillators and home patient monitoring systems. Medtronic Defibrillators Have Critical Flaws, Warns DHS

Online Radio Stations at Risk from Icecast Flaw

Buffer Overflow, CVE-2018-18820, icecast, online radio station, streaming platform, Vulnerabilities, vulnerability, Web SecurityBy Jeremy McClure November 5, 2018

A buffer overflow bug could silence online stations. Online Radio Stations at Risk from Icecast Flaw

PortSmash Side-Channel Attack Siphons Data From Intel, Other CPUs

AMD, CPU, CVE-2018-5407, Data, Hacks, hyper threading, Intel, Meltdown, side-channel, Side-channel attack, SMT, Spectre, TLBleed, VulnerabilitiesBy Jeremy McClure November 5, 2018

An exploit was released for a flaw existing in a process in CPUs called Simultaneous Multithreading (SMT). PortSmash Side-Channel Attack Siphons Data From Intel, Other CPUs

Cisco Security Appliance Zero-Day Found Actively Exploited in the Wild

Adaptive Security Appliance, cisco security appliances, Denial of Service, DoS, firepower threat defense, Hacks, sip inspection engine, Vulnerabilities, vulnerability, zero dayBy Jeremy McClure November 2, 2018

A high severity zero-day flaw exists in Cisco System’s SIP inspection engine. Cisco Security Appliance Zero-Day Found Actively Exploited in the Wild