Earlier, some users found that if the iOS system is connected to a WiFi hotspot named %p%s%s%s%s%n, the iPhone’s wireless network function will be permanently disabled. Even if the user restarts the system or...
ForgeRock AM is open-source access management and permission control platform, which is widely used in universities and social organizations. On June 30, 2021, PortSwigger released a vulnerability analysis report on ForgeRock AM remote code...
PowerISO is a powerful CD/DVD/BD image file processing tool, which allows to open, extract, burn, create, edit, compress, encrypt, split and convert ISO files, and mount ISO files with an internal virtual drive. Recent...
Recently, The security researchers disclosed the POC of the Windows Print Spooler remote code execution vulnerability on GitHub, the vulnerability number is CVE-2021-1675 with the CVSS:3.0 score of 7.8 / 6.8. Windows Print Spooler...
On June 28, 2021, Trend Micro released a risk notice for the security update of the password manager, the vulnerability number is CVE-2021-32461 (CVSSv3 Scores: 7.0), CVE-2021-32462 (CVSSv3 Scores 8.8). Trend Micro Windows Password...
Istio is an open-source service mesh that layers transparently onto existing distributed applications. Istio’s powerful features provide a uniform and more efficient way to secure, connect, and monitor services. Istio is the path to...
Recently, security researchers discovered four security vulnerabilities in the BIOSConnect feature of Dell SupportAssist. These vulnerabilities allow attackers to remotely execute code in the BIOS of the affected device. According to the official Dell...
Cortex XSOAR is Palo Alto’s SOAR (Security Orchestration Automation and Correspondence) product. Its main function is to extract alarm information across sources and execute automated workflows to speed up incident response. There are a...
VMware Carbon Black Cloud Workload (AppC) is a software-as-a-service (SaaS) solution that provides services such as next-generation anti-virus (NGAV), endpoint detection and response (EDR), advanced threat search, and vulnerability management, widely used in cloud...
If you use Google Chrome, you may have noticed that Google has launched a new version. Normally, Google Chrome should complete an automatic update and upgrade to the latest version (v91.0.4472.114). But if you...
Paint 3D is one of the programs pre-installed by Microsoft in the Windows 10 system. The program mainly provides more feature-rich picture editing. Of course, the usage rate of this program is so low...
Last week, GitHub disclosed the details of an easily exploitable Linux vulnerability that can be used to elevate the user privileges of the target system to root privileges. The vulnerability is classified as high-risk...
Google announced a new experimental abuse research funding program for abuse-related strategies and product issues outside the scope of existing vulnerability research funding and vulnerability reward programs (VRP). According to the introduction, the amount...
Well-known virtualization solution provider VMware recently issued an emergency security bulletin: The high-risk vulnerability in VMware vCenter Server is being exploited. This vulnerability is scored 9.8 points (out of 10 points). At least one...
Automattic, the company behind the WordPress content management system, will force a security update to be deployed on more than 5 million websites running the Jetpack WordPress plugin. Jetpack is a very popular WordPress...
For Apple’s self-developed M1 processor, some developers have now discovered that it has a huge loophole, so serious that it cannot be repaired if Apple does not modify the design. The Asahi Linux crew...
