Security News

Google Patches 81 Android Vulnerabilities With September 2017 Updates (Security Week)
2017-09-07 13:42

A total of 81 security vulnerabilities have been addressed in this month’s set of security patches for the Android platform. 13 of the flaws were rated Critical severity. The security bulletin has...

Multiple Vulnerabilities Found in NVIDIA, Qualcomm, Huawei Bootloaders (Threatpost)
2017-09-06 17:55

Researchers find six previously unknown memory corruption and unlock-bypass vulnerabilities in major chipset vendors' firmware code.

Security Vulnerabilities in AT&T Routers (Schneier on Security)
2017-09-06 11:55

They're actually Arris routers, sold or given away by AT&T. There are several security vulnerabilities, some of them very serious. They can be fixed, but because these are routers it takes some...

Multiple Vulnerabilities Found in Mobile Bootloaders (Security Week)
2017-09-05 18:44

A team of security researchers from the University of California, Santa Barbara has discovered a series of code execution and denial of service vulnerabilities in the bootloaders of popular mobile...

Serious Vulnerabilities Disclosed in Modems Used by AT&T's U-verse Service (Security Week)
2017-09-01 13:44

Five vulnerabilities have been found in Arris-manufactured home networking equipment supplied in AT&T's U-verse service. The vulnerabilities are considered so trivial to exploit that they have...

St. Jude Medical Recalls 465,000 Pacemakers Over Security Vulnerabilities (Security Week)
2017-08-31 13:37

Pacemaker Patients Must Visit Healthcare Provider to Recieve Firmware Update That Adressses Security Vulnerabilities read more

Unpatched Vulnerabilities Impact Popular Browser Extension Systems (Security Week)
2017-08-29 15:11

Security researchers have discovered two vulnerabilities that impact the extension systems of major browsers, including Chrome, Firefox, Safari, and Opera. read more

Fuze Patches TPN Handset Vulnerabilities (Threatpost)
2017-08-22 12:05

VoIP vendor Fuze earlier this year patched three vulnerabilities that exposed user account information and enabled unauthorized authentication.

Two Foxit Reader RCE zero-day vulnerabilities disclosed (Help Net Security)
2017-08-18 18:44

Trend Micro’s Zero Day Initiative has released details about two remote code execution zero-day flaws affecting popular freemium PDF tool Foxit Reader. The first one (CVE-2017-10951) is a command...

Philips to Fix Vulnerabilities in Web-Based Health App (InfoRiskToday)
2017-08-18 12:48

Hard-Coded Credentials Could Lead to Patient DataPhilips plans to fix alarming vulnerabilities in a web-based application used to track patient radiation exposure. Versions of the DoseWise Portal...