Security News

An email scam tricked Yandex email recipients into thinking phishing emails were certified legit and from the Microsoft.com domain.

A vulnerability in cryptsetup, a utility used to set up encrypted filesystems on Linux distributions, could allow an attacker to retrieve a root rescue shell on some systems.

VMware patched a vulnerability in Workstation and Fusion that could allow an attacker to run code on a host machine.

Google’s November Android Security Bulletin patched 15 critical vulnerabilities, but only a supplemental patch for the Dirty Cow Linux vulnerability.

Developers with GitLab fixed a critical vulnerability in the open source repository manager that could have allowed the theft of application files, tokens, or secrets.

Wix websites are vulnerable to reflective DOM cross-site scripting attack that could give attackers control of user’s websites.