Page 305 - Vulnerabilities News Today

Photo Credit: IANS IANSLive New Delhi, May 5 (IANS) Dell has issued a security patch for millions its computers dating back to 2009, after cybersecurity research firm SentinelLabs found five serious bugs in Dell and Alienware software that allow hackers to gain full permissions in Windows on the devices. To get full access of the story, click here to subscribe to IANS News Service © 2021 IANS India Private Limited. All Rights Reserved. The reproduction of the story/photograph in any form will...

minute read Share this article: ‘Freevaccinecovax.org’ claimed to be that of a biotech company but instead was stealing info from visitors to use for nefarious purposes. Federal law enforcement in Maryland has shut down a fraudulent website targeting immigrant communities that claimed to be for a company developing a COVID-19 vaccine. Instead, the site was stealing information from people with the purpose of using it for future cybercriminal activity. The U.S. Attorney’s Offi...

minute read Share this article: On top of the privacy spill, Peloton is also recalling all treadmills after the equipment was linked to 70 injuries and the death of one child. Peloton has hit a pothole. Its API was leaking riders’ private data, it ignored a vulnerability disclosure from a penetration testing company, and it partially fixed the hole but didn’t get around to telling the researcher until he reached out to a cybersecurity journalist for some help. This is bad news...

minute read Share this article: Remote code execution, privilege escalation to root and lateral movement through a victim’s environment are all on offer for the unpatched or unaware. A veritable cornucopia of security vulnerabilities in the Exim mail server have been uncovered, some of which could be chained together for unauthenticated remote code execution (RCE), gaining root privileges and worm-style lateral movement, according to researchers. The Qualys Research Team has disc...

iTWire Tuesday, 04 May 2021 09:04 Apple patches actively exploited vulnerabilities Featured Just days after the arrival of major updates for Apples operating systems, the company has released a fresh round of security updates for macOS, iOS, iPadOS and watchOS. Apples latest security updates address issues in the WebKit and WebKit Storage frameworks that allow maliciously crafted content to execute arbitrary code. These vulnerabilities are reportedly being actively exploit...

An intense hunt for corporate account credentials will continue into next quarter, researchers predict.

minute read Share this article: It’s coming in emails disguised as DHL Support shipping notices and is apparently getting prepped for leasing on the underground. A variant of the Buer malware, which is being distributed in emails disguised as DHL support shipping notices, comes with a fresh code rewrite in the popular Rust language and looks like it may be in the process of prepping for rental to other cybercrooks. Join Threatpost for “Fortifying Your Business Against Ransomwa...

The perp faces jail time, but the incident highlights the growing cyber-abuse of QR codes.

With SaaS apps becoming the default system of record for organizations, it has left many struggling to secure their company’s SaaS estate.

minute read Share this article: Information stolen in April 10 ransomware attack was posted on a dark web portal and includes private documents not published as part of public records. The ransomware gang identified as DoppelPaymer has leaked a substantial collection of files from the Illinois Office of the Attorney General (OAG) on a server controlled by the cybercriminal group. The move came after ransom negotiations between the two parties broke down following a ransomware attac...