In July, the Department of Homeland Security allegedly received a report from two cybersecurity firms detailing a vulnerability in the online voter registration systems used by counties in California …
Google warns of severe ‘BleedingTooth’ Bluetooth flaw in Linux kernel
A new vulnerability has been disclosed by Google, a high-severity flaw that affects Linux devices. The bug reportedly lies in the Bluetooth stack within Linux kernel versions 5.9 and below that …
Continue Reading about Google warns of severe ‘BleedingTooth’ Bluetooth flaw in Linux kernel
Comcast TV Remote Hack Opens Homes to Snooping
Recently, a critical vulnerability has been uncovered in the Comcast smart voice remote control, allowing attackers to remotely listen to victims' private conversations. The attack has been disclosed …
Continue Reading about Comcast TV Remote Hack Opens Homes to Snooping
Zerologon Attacks Against Microsoft DCs Snowball in a Week
Last week, the first active exploits of the Microsoft Zerologon vulnerability (CVE-2020-1472) were flagged. Now, just over a week later, threat actors are leveraging the bug to attempt to take over …
Continue Reading about Zerologon Attacks Against Microsoft DCs Snowball in a Week
Agencies Must Patch Zerologon Bug by Monday says US CISA
Earlier this week, the US Department of Homeland Security issued an emergency directive that calls for all civilian government agencies to patch a Windows vulnerability that has been categorized as …
Continue Reading about Agencies Must Patch Zerologon Bug by Monday says US CISA
Bluetooth Spoofing Bug Affects Billions of IoT Devices
Academic researchers at Purdue University have discovered a vulnerability within Bluetooth Low Energy (BLE) that could allow for spoofing attacks. This bug remains unpatched in Android devices, …
Continue Reading about Bluetooth Spoofing Bug Affects Billions of IoT Devices
Windows Exploit Released For Microsoft ‘Zerologon’ Flaw
Security researchers and US government authorities have been alerting the public to a critical privilege escalation flaw in Microsoft services, urging admins to address the pressing security issue. A …
Continue Reading about Windows Exploit Released For Microsoft ‘Zerologon’ Flaw
WordPress Plugin Flaw Allows Attackers to Forge Emails
More than 100,000 WordPress sites are subject to a critical flaw that lies in a plugin service called Email Subscribers and Newsletters by Icegram. The plugin is a high-severity flaw that allows …
Continue Reading about WordPress Plugin Flaw Allows Attackers to Forge Emails
Bluetooth Bug Could Allow MITM Attacks
A new vulnerability within Bluetooth has been discovered by security researchers at the École Polytechnique Fédérale de Lausanne (EPFL) and Purdue University. The flaw could potentially allow …
Continue Reading about Bluetooth Bug Could Allow MITM Attacks
CDRThief Malware Targets VoIP Gear in Carrier Networks
Malware known as CDRTheif has been targeting voice over IP (VoIP) soft switches inside telecom carrier's networks in a data-stealing campaign that utilizes Linux-targeted code. The code has the …
Continue Reading about CDRThief Malware Targets VoIP Gear in Carrier Networks