-
Microsoft still searching for zero-day fixes following Patch Tuesday
News ProxyNotShell remains unaddressed even as Microsoft fixes several critical flaws in its monthly package of security patches
News -
Boeing 737 MAX: You can no longer escape liability due to poor code
Analysis Known vulnerabilities in Boeing’s flight software led to two fatal crashes, as well as a landmark decision with major ramifications for software development
Analysis -
Microsoft's third mitigation update for Exchange Server zero-day exploit bypassed within hours
News The string of problematic temporary fixes for ‘ProxyNotShell’ grows longer after a 'confusing' and 'atypical' week-long vulnerability disclosure process
News -
CISA issues fresh orders to polish security vulnerability detection in federal agencies
News The move marks the latest step in the cyber security authority's ongoing ambition to minimise the government's exposure to attacks
News -
US military contractor hacked through Microsoft Exchange vulnerabilities, custom exfiltration tools
News In a joint advisory, US security groups have warned the prolonged campaign showed new strategies in play, with the vector still unknown
News -
GitHub alerts users to active phishing campaign
News The attack revolves around counterfeit CircleCI notifications urging users to accept updated terms of use and privacy policy
News -
1.1 million Tesla cars recalled over software glitch
News The mass recall is prompted by a flaw in the vehicles' automatic window reversal system
News -
Mozilla patches high-severity security flaws in new ‘speedy’ Firefox release
News Numerous vulnerabilities across Mozilla's products could potentially lead to code execution and system takeover
News -
15-year-old vulnerability found in Python module
News Hundreds of thousands of repositories have been found to be exposed to the vulnerability
News -
Wintermute loses $162 million in DeFi hack
News A vulnerability in the vanity address generator Profanity led to the attack
News -
WordPress plugin vulnerability leaves sites open to total takeover
News Customers on WordFence's paid tiers will get protection from the WPGate exploit right away, but those on the free-tier face a 30-day delay
News -
Trend Micro cautions against actively exploited Apex One RCE vulnerability
News The firm also patched a high severity security flaw that lets perpetrators bypass authentication
News
