Security News

Amnesty sues maker of Pegasus, the spyware let in by WhatsApp zero day
2019-05-21 11:51

Amnesty International, which was sent the Pegasus spyware via a WhatsApp message, is seeking to stop NSO Group’s "web of surveillance."

Google Starts Tracking Zero-Days Exploited in the Wild
2019-05-16 12:44

Google Project Zero has started tracking zero-day vulnerabilities exploited in attacks before the impacted vendor released patches. read more

Microsoft Patches Zero-Day Bug Under Active Attack
2019-05-14 20:49

Microsoft Patch Tuesday security bulletin tackles 22 critical vulnerabilities.

WhatsApp Zero-Day Exploited in Targeted Spyware Attacks
2019-05-14 12:58

WhatsApp has patched a vulnerability that allowed attackers to install spyware on victims' phones.

It's 2019 and a WhatsApp call can hack a phone: Zero-day exploit infects mobes with spyware
2019-05-14 01:18

Rap for surveillanceware chaps in chat app voice yap trap flap – now everyone patch A security flaw in WhatsApp can be, and has been, exploited to inject spyware into victims' smartphones: all a...

Oracle Patches WebLogic Zero-Day Exploited in Attacks
2019-04-29 12:53

Oracle has released an out-of-band update for WebLogic Server, a Java EE application server that is part of the company’s Fusion Middleware offering, to patch a zero-day vulnerability exploited in...

Week in review: Oracle WebLogic zero-day under attack, a new way to improve network security
2019-04-28 18:30

Here’s an overview of some of last week’s most interesting news and articles: Qualcomm chips leak crypto data from secure execution environment A vulnerability in Qualcomm chips could be exploited...

'Highly Critical' Unpatched Zero-Day Flaw Discovered In Oracle WebLogic
2019-04-25 15:03

A team of cybersecurity researchers today published a post warning enterprises of an unpatched, highly critical zero-day vulnerability in Oracle WebLogic server application that some attackers...

Researchers flag new Oracle WebLogic zero-day RCE flaw
2019-04-25 13:25

Attackers looking to compromise Oracle WebLogic servers for their own needs have a new zero-day RCE flaw at their disposal. “Oracle WebLogic wls9_async and wls-wsat components trigger...

Windows Zero-Day Emerges in Active Exploits
2019-04-16 16:13

Patched just last week, the Windows kernel bug is being used for full system takeover.