Although Microsoft has announced the Windows 11 system, the official version of this system has not yet been released. Currently, Microsoft is only testing for users participating in the Insider Preview program. Of course,...
Recently, Microsoft has issued a risk notice for Windows privilege escalation vulnerability, the vulnerability number is CVE-2021-36934 with the CVSS score of 7.8. Currently, there is no official patch for this vulnerability. An attacker...
On July 21, 2021, RedHat officially released a risk notice for the Linux kernel local privilege escalation vulnerability, the vulnerability number is CVE-2021-33909. This vulnerability is a type conversion vulnerability in the Linux kernel...
On July 21, 2021, Redis officially issued a risk notice for Redis remote code execution vulnerabilities, the vulnerability number is CVE-2021-32761 with the CVSS score of 7.5. Redis is an in-memory database that persists...
On July 19, 2021, Fortinet officially released a risk notice for FortiManager & FortiAnalyzer UAF remote code execution, the vulnerability number is CVE-2021-32589 with the CVSSv3 Score of 7.5. FortiManager and FortiAnalyzer can achieve...
Microsoft’s Windows Hello biometric verification is considered to have high security, such as infrared cameras and fingerprint recognition are usually not easy to forge. Passing infrared camera certification usually requires a living body test,...
On July 14, 2021, security researcher @theflow published an analysis report on the CVE-2021-22555 Linux Netfilter privilege escalation vulnerability. This vulnerability was used in kCTF to attack the kubernetes pod container to achieve virtualization...
Large technology companies usually have their own security teams, and they also cooperate with external security experts to discover security vulnerabilities in their products to improve product security. For example, Microsoft also cooperates with...
Recently, the REvil ransomware has caused a headache for the US government. The ransomware launched a supply chain ransomware attack through Kaseya, a developer of enterprise network management software. As of the publication of...
According to a tweet released by the well-known developer @CobraBitcoin, the Bitcoin.org website is currently under a large-scale distributed denial of service attack launched by anonymous hackers. The website hosts many contents such as...
ForgeRock AM is open-source access management and permission control platform, which is widely used in universities and social organizations. On June 30, 2021, PortSwigger released a vulnerability analysis report on ForgeRock AM remote code...
PowerISO is a powerful CD/DVD/BD image file processing tool, which allows to open, extract, burn, create, edit, compress, encrypt, split and convert ISO files, and mount ISO files with an internal virtual drive. Recent...
