Vulnerabilities

Yubico announced that they have planned to replace their hardware security keys due to a firmware flaw which reduced the randomness of cryptographic keys generated by…

Microsoft has published their monthly security updates, known as Patch Tuesday which patches 88 vulnerabilities out of which 21 has been given the severity "Critical."

A critical vulnerability was discovered in one of a popular WordPress Live Chat plugin, which when exploited, would let unauthorized remote hackers to steal chat logs…

A high-severity arbitrary OS command execution vulnerability (CVE-2019-12735) was found in Vim and Neovim which are the two most popular and powerful command-line text editing applications…

A critical remote execution flaw was found in a popular Ukrainian TV streaming middleware platform, which when exploited allows the attackers to bypass authentication and extract…

Komodo, a cryptocurrency project learned about a backdoor in one of its wallet apps named Agama and they hacked their own customers to keep their funds…

A security researcher has found a new way to bypass Apple’s macOS security warnings by performing 'Synthetic Clicks' on behalf of users without the need of…

A newly unpatched vulnerability was disclosed in Microsoft Windows Remote Desktop Protocol (RDP). The vulnerability which has been dubbed as CVE-2019-9510, could permit client-side attackers to…

Convert Plus which is a commercial plugin for WordPress websites has a critical vulnerability that lets unauthenticated attacker to create accounts with administrator privileges.

Almost one million Windows PCs are vulnerable to BlueKeep which is a vulnerability in the Remote Desktop Protocol (RDP) service affecting older versions of the Windows…