vulnerabilities

How Spook.js, the first practical Spectre-based attack, works.

The Open Management Infrastructure agent, with four vulnerabilities, is being automatically installed on virtual Linux machines on Microsoft Azure.

An unpatched vulnerability in the MSHTML engine is enabling attacks on Microsoft Office users.

Malefactors are looking for vulnerable Confluence servers and exploiting CVE-2021-26084, an RCE vulnerability.

Smart devices are easy targets for cybercriminals. Here’s how to protect your smart vacuum cleaner, air conditioner and other connected devices.

Update all Windows systems immediately to patch CVE-2021-1675 and CVE-2021-34527 vulnerabilities in the Windows Print Spooler service.

Some network-attached storage from WD has been reset to factory settings, wiping users’ data. Here’s how to protect your WD NAS.

Our technologies detected targeted attacks involving a number of zero-day exploits.

IoT devices tend to greatly increase a company’s attack surface, but you can minimize the risk.

Researchers discuss the new cybercriminal tactic of downloading outdated binaries onto modern computers and exploiting their vulnerabilities.

Prioritize updating the apps that keep your devices and personal data safe from cyberattacks.

A zero-day vulnerability in Microsoft Windows may already have been exploited.

Files with the TXT extension are typically considered safe. Are they, though?

To stop all threats to the corporate infrastructure, you have to do more than just protect workstations.

Hackers trying to inflict maximum reputation damage are sending out links to the data they stole through Accellion FTA vulnerabilities.

Attackers exploit four dangerous vulnerabilities in Microsoft Exchange to get a foothold in the corporate network.

Hackers are actively exploiting a dangerous vulnerability in Google Chrome. With Chrome 88.0.4324.150, Google has patched the vulnerability.

Version 14.4 patches vulnerabilities that cybercriminals are actively exploiting. Install this update as soon as possible.

No one should be using the dead technology, and any websites that still use it need an update.

“Zyfwp,” an admin-level account with a hard-coded password, discovered in several networking devices made by ZyXel.

The CVE-2020-1472 vulnerability in the Netlogon protocol, aka Zerologon, lets attackers hijack domain controllers.