Unless you have been hiding under a rock, you’re probably aware of the Kaseya attack. A terrifying assault on an organisation with global reach, the attack was almost unprecedented and has (understandably) caused widespread...
According to the mailing list, Intel engineers proposed to add a filter to Linux drivers so that they can set a list of drivers that are allowed or denied to be loaded by the...
As early as 2010, Google launched the Vulnerability Rewards Programs (VRP), security researchers can directly submit the discovered vulnerabilities to Google. After obtaining the vulnerability report, Google will review the vulnerability report and issue...
At the beginning of last month, McDonald’s, a world-renowned fast-food brand, issued a statement saying it was attacked by hackers. Hackers stole part of McDonald’s data in the United States, South Korea, and Taiwan,...
Although Microsoft has announced the Windows 11 system, the official version of this system has not yet been released. Currently, Microsoft is only testing for users participating in the Insider Preview program. Of course,...
Recently, Microsoft has issued a risk notice for Windows privilege escalation vulnerability, the vulnerability number is CVE-2021-36934 with the CVSS score of 7.8. Currently, there is no official patch for this vulnerability. An attacker...
On July 21, 2021, RedHat officially released a risk notice for the Linux kernel local privilege escalation vulnerability, the vulnerability number is CVE-2021-33909. This vulnerability is a type conversion vulnerability in the Linux kernel...
On July 21, 2021, Redis officially issued a risk notice for Redis remote code execution vulnerabilities, the vulnerability number is CVE-2021-32761 with the CVSS score of 7.5. Redis is an in-memory database that persists...
On July 19, 2021, Fortinet officially released a risk notice for FortiManager & FortiAnalyzer UAF remote code execution, the vulnerability number is CVE-2021-32589 with the CVSSv3 Score of 7.5. FortiManager and FortiAnalyzer can achieve...
Recently, Microsoft quietly put its Linux distribution CBL-Mariner on GitHub, which is a product developed by the Windows Subsystem Linux 2 team, mainly used for servers rather than desktops, to build its cloud infrastructure...
Microsoft’s Windows Hello biometric verification is considered to have high security, such as infrared cameras and fingerprint recognition are usually not easy to forge. Passing infrared camera certification usually requires a living body test,...
On July 14, 2021, security researcher @theflow published an analysis report on the CVE-2021-22555 Linux Netfilter privilege escalation vulnerability. This vulnerability was used in kCTF to attack the kubernetes pod container to achieve virtualization...
