Security researchers at the Imaginary team are currently issuing a warning that Kaspersky Security Software has security vulnerabilities and recommends that users upgrade to the latest version of Kaspersky as soon as possible. The...
Cisco released an announcement to fix a REST API Authentication Bypass Vulnerability in Cisco Elastic Services Controller (ESC) (CVE-2019-1867). The vulnerability is caused by incorrect validation of API requests. An attacker could exploit the...
The Dell SupportAssist is a help program for Dell devices that are pre-installed by default on most Dell computers. This support assistant can be used to help users automatically update firmware and drivers, and...
A new phishing technology called “Inception Bar” has appeared and is proven to work on Chrome for mobile. This method allows hackers to block real URLs on Chrome for mobile and display fake URLs...
Qualcomm has confirmed that the company’s various chipsets have security flaws. These chipsets have been applied to hundreds of millions of Android devices around the world. The researchers revealed that the vulnerability primarily allows...
There is a serious security hole in the P2P communication software component iLnkP2P. Hackers can hijack and access nearly 2 million IoT devices and remotely control them. The P2P software component iLnkP2P is deployed...
A new report points out that MS Office, with one of the most popular office tools on the market, has a large user base and has become an important target for hackers. At the...
A hacker successfully invaded two GPS location tracking applications, allowing him to monitor the position of tens of thousands of cars, and even shut down some of the car’s engine. The hacker, L&M, successfully...
Recently, the Spring disclosed a directory traversal vulnerability in Spring Cloud Config (CVE-2019-3799) in the latest security update. The vulnerability is officially rated high and is a high-risk vulnerability. The nature of the vulnerability...
Cisco released an announcement to fix a vulnerability in the IOS XR 64-bit software used in the Cisco ASR 9000 Series (CVE-2019-1710). The vulnerability is caused by faulty isolation of the secondary management interface...
On April 16, 2019, Oracle officially released CPU (Critical Patch Update), security notices third-party security bulletins and other announcements, repairing 297 different levels of vulnerabilities. Such proactive measures by industry leaders underscore the importance...
FireEye released a free automatic analysis tool flashmingo, which can detect suspicious flash samples and conduct investigations. The tool integrates various analytics workflows into a single application and can be extended with Python plugins....
Adblock Plus released a new 3.2 version on July 17, 2018, which introduced a new filter option $rewrite for rewriting requests. Immediately thereafter, AdBlock and uBlock have added support for this option. However, according...
A few days ago, security researchers discovered a security vulnerability in Internet Explorer. This vulnerability can be used by attackers to steal files or local information. According to the researchers, IE is the default...
Security researchers recently revealed a set of vulnerabilities, collectively known as Dragonblood, that affected the WiFi Alliance’s recently released WPA3 Wi-Fi security and authentication standards. If exploited, the vulnerability will allow an attacker within...
There are security vulnerabilities in the Samsung Galaxy S10 ultrasonic biometric fingerprint scanner, and hackers can use the 3D printed fingerprint of the mobile phone user to pass the verification. The Samsung S10 and...
