3707 matches found
CoreText Denial of Service Vulnerability in Multiple Apple Products
Apple iOS, macOS Sierra, tvOS, and watchOS are products of Apple Inc. Apple iOS is an operating system for mobile devices; tvOS is a smart TV operating system; and watchOS is a smart watch operating system. coreText is one of the typography engines. CoreText is a typography engine. A security...
Hackers pwn Edge, Firefox, Safari, macOS, & VirtualBox at Pwn2Own 2018
By Waqas The white hat hackers at Pwn2Own 2018, have once again proved This is a post from HackRead.com Read the original post: Hackers pwn Edge, Firefox, Safari, macOS, & VirtualBox at Pwn2Own 2018...
Programs Controlling ICS Robotics Are ‘Wide Open’ to Vulnerabilities
Most manufacturers have connected their operational technology – including industrial control systems and robotic equipment –to the internet, yet the lack of basic security protocols leave these companies open to cyberattacks. Industrial security company Malcrawler pinpointed these dangers at...
CVE-2018-0932
Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, and Microsoft Edge and Internet Explorer in Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows information...
Update Samba Servers Immediately to Patch Password Reset and DoS Vulnerabilities
Samba maintainers have just released new versions of their networking software to patch two critical vulnerabilities that could allow unprivileged remote attackers to launch DoS attacks against servers and change any other users' passwords, including admin's. Samba is open-source software...
Security advisory YSA-2018-02 | Yubico
In Chrome 61, released in September, 2017, Google included a feature called WebUSB. WebUSB allows websites to request direct access to USB devices through JavaScript. A web page could potentially access and interact with a USB device interface unless the operating system reserved exclusive access...
DEBIAN-CVE-2018-7541
An issue was discovered in Xen through 4.10.x allowing guest OS users to cause a denial of service hypervisor crash or gain privileges by triggering a grant-table transition from v2 to v1...
Apple iOS/watchOS/tvOS/macOS High Sierra Memory Corruption Vulnerability
Apple iOS is an operating system developed by Apple for the iPhone. watchOS is the operating system for the Apple Watch. tvOS is the Apple TV design system, based on iOS. mac OS is a set of operating systems that run on Apple's Macintosh series of computers. A memory corruption vulnerability exis...
CVE-2018-6356
Jenkins before 2.107 and Jenkins LTS before 2.89.4 did not properly prevent specifying relative paths that escape a base directory for URLs accessing plugin resource files. This allowed users with Overall/Read permission to download files from the Jenkins master they should not have access to. On...
CVE-2018-6356
Jenkins before 2.107 and Jenkins LTS before 2.89.4 did not properly prevent specifying relative paths that escape a base directory for URLs accessing plugin resource files. This allowed users with Overall/Read permission to download files from the Jenkins master they should not have access to. On...
CVE-2018-0866
Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the scripting engine handles objects in memory, aka...
Bingo, Amigo! Jackpotting: ATM malware from Latin America to the World
Introduction Of all the forms of attack against financial institutions around the world, the one that brings traditional crime and cybercrime together the most is the malicious ecosystem that exists around ATM malware. Criminals from different backgrounds work together with a single goal in mind:...
Meltdown and Spectre Attacks | Cloud Foundry
Severity Advisory/Critical Description Meltdown and Spectre exploit critical vulnerabilities in modern processors. These hardware bugs allow programs to steal data which is currently processed on the computer. While programs are typically not permitted to read data from other programs, a maliciou...
Meltdown / Spectre Mitigation Is a Work in Progress
Since researchers disclosed the Meltdown and Spectre vulnerabilities on Jan. 3, vendors and IT departments have been consumed trying to figure out how to properly address the potentially devastating effects of these kernel-level bugs. By now, one thing we know for sure is that dealing with the...
Mozilla Firefox Security Advisories (MFSA2018-01, MFSA2018-01) - Windows
Mozilla Firefox is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefox";...
[Guide] How to Protect Your Devices Against Meltdown and Spectre Attacks
Recently uncovered two huge processor vulnerabilities called Meltdown and Spectre have taken the whole world by storm, while vendors are rushing out to patch the vulnerabilities in its products. The issues apply to all modern processors and affect nearly all operating systems Windows, Linux,...
Impact of Meltdown and Spectre on Akamai
Overview On Wednesday, January 3rd, researchers from Google Project Zero, Cyberus Technology, Graz University of Technology, and other organizations released details about a pair of related vulnerabilities, dubbed Meltdown and Spectre. These vulnerabilities appear to affect all modern processors...
CVE-2018-0754
The Windows Adobe Type Manager Font Driver Atmfd.dll in Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows an information disclosure...
“Ready Player One” – Are you Ready to Protect Your Endpoints from the Bad Guys?
At times it can feel like a game as you watch the cyber-breach scorecards. Yahoo 3 billion users, Equifax 143 million consumers, Uber 57 million users, Imgur 1.7 million users are just a sample of the companies that have released new information on large breaches in the last few months...
