While companies are struggling under continuous ransomware attacks, Android users are increasingly becoming targets of banking malware. According to a survey by the security agency ESET, the number of such malware has increased by...
Google announced a new experimental abuse research funding program for abuse-related strategies and product issues outside the scope of existing vulnerability research funding and vulnerability reward programs (VRP). According to the introduction, the amount...
Well-known virtualization solution provider VMware recently issued an emergency security bulletin: The high-risk vulnerability in VMware vCenter Server is being exploited. This vulnerability is scored 9.8 points (out of 10 points). At least one...
After ransomware has repeatedly attacked US government agencies, universities, medical institutions, private enterprises, and even infrastructure, the US government has begun to crack down on ransomware attacks. According to Reuters, the US Department of...
Automattic, the company behind the WordPress content management system, will force a security update to be deployed on more than 5 million websites running the Jetpack WordPress plugin. Jetpack is a very popular WordPress...
For Apple’s self-developed M1 processor, some developers have now discovered that it has a huge loophole, so serious that it cannot be repaired if Apple does not modify the design. The Asahi Linux crew...
On May 26, 2021, VMware officially released a risk notice for the remote code execution vulnerability in VMware vCenter Server, which was discovered by Ricter Z, a security researcher at 360 Noah Lab. The...
Extension stores that rely entirely on automated censorship are more susceptible to false and malicious extensions. Chrome Web Store falls into this category. Nowadays, there are more and more extensions in this store, but...
In the context of the increasing global cybercrime, companies and organizations will continue to increase investment in security tools and technologies. The latest report released by market research company Gartner predicts that global spending...
Fingerprintjs, a developer of network fraud detection solutions, was researching anti-fraud technologies, it unexpectedly discovered that major browsers have program flood vulnerabilities. The test found that Google browser, Firefox browser, Tor Onion browser, and...
Earlier, Colonial Pipeline, the largest oil product pipeline transportation company in the United States, was attacked by ransomware, and the company’s oil product transportation system was subsequently taken offline. This led to serious supply...
On May 17, 2021, XStream issues an alert about remote command execution vulnerability. The CVE number is CVE-2021-29505. This vulnerability has low complexity and high risk. XStream is a simple library to serialize objects...
