Security News

Remote ID verification tech is often biased, bungling, and no good on its own
2024-09-30 12:40

Only 2 out of 5 tested products were equitable across demographics A study by the US General Services Administration (GSA) has revealed that five remote identity verification (RiDV) technologies...

Critical Flaws in Tank Gauge Systems Expose Gas Stations to Remote Attacks
2024-09-30 11:55

Critical security vulnerabilities have been disclosed in six different Automatic Tank Gauge (ATG) systems from five manufacturers that could expose them to remote attacks. "These vulnerabilities...

Critical Linux CUPS Printing System Flaws Could Allow Remote Command Execution
2024-09-27 12:33

A new set of security vulnerabilities has been disclosed in the OpenPrinting Common Unix Printing System (CUPS) on Linux systems that could permit remote command execution under certain...

CUPS flaws enable Linux remote code execution, but there’s a catch
2024-09-26 22:03

Under certain conditions, attackers can chain a set of vulnerabilities in multiple components of the CUPS open-source printing system to execute arbitrary code remotely on vulnerable machines. [...]

That doomsday critical Linux bug: It's CUPS. May lead to remote hijacking of devices
2024-09-26 17:34

No patches yet, can be mitigated, requires user interaction Final update After days of anticipation, what was billed as one or more critical unauthenticated remote-code execution vulnerabilities...

That doomsday critical Linux bug: It's CUPS. Could lead to remote hijacking of devices
2024-09-26 17:34

Quick fix: Remove cups-browsed, block UDP port 631 Updated After days of waiting and anticipation, what was billed as one or more critical unauthenticated remote-code execution vulnerabilities in...

Critical Flaw in Microchip ASF Exposes IoT Devices to Remote Code Execution Risk
2024-09-23 09:58

A critical security flaw has been disclosed in the Microchip Advanced Software Framework (ASF) that, if successfully exploited, could lead to remote code execution. The vulnerability, tracked as...

Patch Issued for Critical VMware vCenter Flaw Allowing Remote Code Execution
2024-09-18 05:08

Broadcom on Tuesday released updates to address a critical security flaw impacting VMware vCenter Server that could pave the way for remote code execution. The vulnerability, tracked as...

Organizations overwhelmed by numerous and insecure remote access tools
2024-09-18 03:00

Organizations are combating excessive remote access demands with an equally excessive number of tools that provide varying degrees of security, according to Claroty. Data from more than 50,000...

VMware patches remote make-me-root holes in vCenter Server, Cloud Foundation
2024-09-17 20:50

Bug reports made in China Broadcom has emitted a pair of patches for vulnerabilities in VMware vCenter Server that a miscreant with network access to the software could exploit to completely...