Intel has now released a new version of microcode updates for partners that address the speculative execution of the Spectre and L1TF variant. In addition to speculative execution vulnerabilities, there is the latest discovered...
Developed by the French software company, TRAEFIK is a well-known load balancer that many companies deploy in server clusters to control traffic. However, a vulnerability (CVE-2018-15598) could reveal a deployed digital certificate, and an...
Ghostscript is an interpreted language for Adobe PostScript and PDF and is currently used in a variety of applications (eg ImageMagick, Evince, GIMP, PDF Reader, etc.). Recently, Google Project Zero security researcher Tavis Ormandy...
Recently, Emerson DeltaV DCS Workstations fixed several security vulnerabilities, including directory traversal, privilege escalation and stack overflow. CVSS 3.0 scored up to 9.6 points. At present, Emerson officially has released the corresponding patch to fix...
Sam Thomas, head of research at Secarma, a UK security company, presented security vulnerabilities in the PHP programming language at the Security Conference of Black Hat and BSides this month and noted that the vulnerability affects all PHP applications...
The Czech security company AVAST recently released a report saying that nearly 50,000 MQTT servers were exposed on the network due to misconfigurations and exposed to the public network. MQTT, short for telemetry transmission...
The Google Chrome development team has released some issues submitted by the new security staff, and these vulnerabilities have been disclosed in the latest version. The number of security vulnerabilities numbered CVE-2018-6177 is more...
On Tuesday, August 14, there was a high-risk memory corruption vulnerability (CVE-2018-8302) in the August security update released by Microsoft. The vulnerability stems from software not being able to handle objects in memory correctly, and...
On August 14th, Adobe officially released the August security update, which fixes multiple vulnerabilities in its products, including Acrobat and Reader, Flash Player, Experience Manage and Creative Cloud Desktop Application. Vulnerability Overview: Adobe Flash...
Microsoft released the August security update patch on Tuesday, fixing 63 security issues ranging from simple spoofing attacks to remote code execution. Products related to .NET Framework, Adobe Flash Player, Device Guard, Internet Explorer,...
Recently, security researchers have discovered a new “Foreshadow” vulnerability affecting Intel processors that bypass the built-in chip security features, making it possible for attackers to obtain sensitive data stored in the supposedly secure cordoned-off...
Recently, Siemens issued an official notice stating that there are two high-risk vulnerabilities (CVE-2018-11453, CVE-2018-11454) in the TIA Portal (Totally Integrated Automation Portal) software used in its SIMATIC STEP7 and WinCC products. Affected version...
Checkpoint, an Israeli cybersecurity company, published an article about fax machine vulnerabilities at the annual Defcon hack in Las Vegas yesterday, called Faxploit. It found that the attacker needed a fax number to transfer the...
Since the launch of smart speakers such as Amazon Echo, some people began to worry that these devices may overhear their speech. In recent days, Tencent security researchers have discovered a way to crack Echo...
RICHMOND, VA, August 13, 2018 — Risk-Based Security today announced the release of its 2018 mid-year VulnDB QuickView report that shows there have been 10,644 vulnerabilities disclosed through June 30th. This is the highest number of...
Two researchers at the University of Saarland in Germany published the paper “ret2spec: Speculative Execution Using Return Stack Buffers” (PDF), which revealed a new vulnerability in the Intel processor. The new flaw enables an “inverse spectre attack”...
