F-Secure’s hardware security team found two vulnerabilities in Xilinx Zynq UltraScale+ SoCs, one of which could not be patched by updating security patches. The affected products include ZynqUltraScale + series system-on-chip (SoC), multi-processor system-on-chip...
Recently, Lilith Wyatt and Claudio Bozzato from the Cisco Talos research team found eight vulnerabilities in Google Nest Cam IQ indoor networking camera (version 4620002), including three denial-of-service (DoS) vulnerabilities, two code execution Vulnerabilities...
Yesterday, Microsoft has pushed this month’s routine cumulative update to various products to fix various vulnerabilities, but there is a known security vulnerability that Microsoft has not fixed. In view of this Google security...
An independent researcher, Vasily Kravets found a loophole in the steam game platform. Kravets said that all Windows versions of the Steam client exist this vulnerability, which allows hackers to escalate privilege on the...
McAfee researchers recently revealed that there is a remote code execution vulnerability called CVE-2009-0692 in the VOIP solution provider developed by Avaya. An attacker could exploit the vulnerability to hijack the phone’s normal operations,...
Due to its cross-platform capabilities, the Electron development platform is a key component of many applications. Electron-based on JavaScript and Node.js is used in popular messaging applications such as Skype, WhatsApp and Slack, and...
Google Project Zero has announced that Apple iMessage has multiple security vulnerabilities and reminds users that it needs to be fixed immediately. These vulnerabilities are very dangerous because of the high level of damage,...
Researchers at Eclypsium disclosed vulnerabilities discovered on the BMC firmware used by Lenovo and Gigabyte servers. This vulnerability can be used to embed a malicious program into the firmware, making it difficult to detect...
Earlier this year, a Google researcher discovered a security vulnerability in Secure Encrypted Virtualization (SEV) within AMD’s EPYC processor that allowed an attacker to obtain a security key and access an otherwise isolated virtual...
Charles Holmes, a security researcher at Atredis Partners, discovered a new vulnerability in Kubernetes that could allow an attacker to place a malicious container on a user’s workstation. This vulnerability affects Kubernetes’ kubectl command-line...
Netflix engineers have discovered multiple TCP network vulnerabilities in the Linux and FreeBSD kernels. Vulnerabilities are related to minimum segment size (MSS) and TCP Selective Acknowledgement (SACK) capabilities, the most serious of which is...
Users who are concerned about security information should probably remember MIRAI a few years ago, the MIRAI worm is still the world’s wildest IoT virus until now. In the past, MIRAI used the Internet...
In a recently pushed patch, Ring Doorbell has fixed a security risk in its own products – because hackers can use the vulnerability to launch attacks that inject fake image content into the video...
Perhaps many netizens may have thought that it is illegal to directly test whether a website is vulnerable without the permission of the website owner. Or is it illegal to directly disclose the vulnerability...
Two security researchers recently announced that Cisco’s WebEx online video conferencing software was affected by a critical vulnerability that could be exploited to provide permissions and execute arbitrary commands. The vulnerability was discovered by...
A Google security researcher said that he had discovered 30 vulnerabilities in Apple’s iOS operating system since 2016. These vulnerabilities make Apple’s software more secure – he hopes Apple can pay more for it. Apple...
