Security News

"Inception Attackers" Combine Old Exploit and New Backdoor
2018-11-09 15:43

A malicious group known as the “Inception” attackers has been using a year-old Office exploit and a new backdoor in recent attacks, Palo Alto Networks security researchers warn. read more

Cisco Accidentally Released Dirty Cow Exploit Code in Software
2018-11-08 17:39

Cisco revealed that it had "inadvertently" shipped an in-house exploit code that was used in test scripts as part of its TelePresence Video Communication Server and Expressway Series software.

Oops: Cisco accidentally leaked in-house Dirty COW exploit code with biz conf call software
2018-11-08 13:23

Critical bugs patched in switches, messaging, analytics Cisco this week patched critical vulnerabilities in its switches, Stealthwatch, and Unity voice messaging system.…

Oops: Cisco accidentally released in-house Dirty COW exploit attack code with software installer
2018-11-08 13:23

Critical bugs patched in switches, messaging, analytics Cisco this week patched critical vulnerabilities in its switches, Stealthwatch, and Unity voice messaging system. Oh, and 'fessed up that it...

Unpatched VirtualBox Zero-Day Vulnerability and Exploit Released Online
2018-11-08 09:33

An independent exploit developer and vulnerability researcher has publicly disclosed a zero-day vulnerability in VirtualBox—a popular open source virtualization software developed by Oracle—that...

VirtualBox Guest-to-Host escape 0day and exploit released online
2018-11-07 13:07

Independent vulnerability researcher Sergey Zelenyuk has made public a zero-day vulnerability he discovered in VirtualBox, the popular open source virtualization software developed by Oracle....

New Intel CPU Flaw Exploits Hyper-Threading to Steal Encrypted Data
2018-11-04 09:33

A team of security researchers has discovered another serious side-channel vulnerability in Intel CPUs that could allow an attacker to sniff out sensitive protected data, like passwords and...

PoC Exploit Compromises Microsoft Live Accounts via Subdomain Hijacking
2018-11-01 15:44

Poor DNS housekeeping opens the door to account takeover.

Researchers exploit Microsoft Word through embedded video
2018-10-29 12:49

A group of researchers has found a way to infect computers via Word documents without triggering a security warning.

Hackers selling exploits to law enforcement agencies have poor security practices
2018-10-26 09:55

Startups selling vulnerabilities, exploit kits, and access to personal data to government agencies have a poor record of securing their own platforms.