Security News

Cisco Patches Serious DoS, Injection Flaws in Several Products
2017-11-02 13:46

Cisco has released updates for several of its security, networking and cloud products to address over a dozen vulnerabilities, including high severity issues that can be used for command...

Google Warns of DoS and RCE Bugs in Dnsmasq
2017-10-03 17:16

A domain name system server implementation is at risk of remote code execution, information exposure and denial-of-service attacks after a seven vulnerability were disclosed by Google and patched...

VMware Patches 'Hard-to-Exploit' DoS Vulnerability (Security Week)
2017-08-14 10:00

An update released by VMware for its NSX-V network virtualization solution patches an important denial-of-service (DoS) vulnerability. The security hole, tracked as CVE-2017-4920, exists in the...

Cisco Fixes DoS, Authentication Bypass Vulnerabilities, OSPF Bug (Threatpost)
2017-08-03 20:30

Cisco fixed two high severity vulnerabilities in two products this week that could have let an attacker trigger a denial of service condition or bypass local authentication.

Code Execution, DoS Vulnerabilities Found in FreeRADIUS (Security Week)
2017-07-18 09:29

Security testing of FreeRADIUS using a technique known as fuzzing revealed more than a dozen issues, including vulnerabilities that can be exploited for denial-of-service (DoS) attacks and remote...

Cisco Patches XXE, DOS, Code Execution Vulnerabilities (Threatpost)
2017-06-22 19:08

Cisco patched three vulnerabilities in three products this week that if exploited, could have resulted in a denial of service, crash and in some instances, arbitrary and remote code execution.

8 RCE, DoS holes in Microsoft Malware Protection Engine plugged (Help Net Security)
2017-05-30 17:22

After the discovery and the fixing of a “crazy bad” remote code execution flaw in the Microsoft Malware Protection Engine earlier this month, now comes another MMPE security update that plugs...

The CIA's "Development Tradecraft DOs and DON'Ts" (Schneier on Security)
2017-03-13 17:00

Useful best practices for malware writers, courtesy of the CIA. Seems like a lot of good advice. General: DO obfuscate or encrypt all strings and configuration data that directly relate to tool...