vulnerability

New high severity security vulnerabilities have been disclosed in different implementations of Unified Extensible Firmware Interface (UEFI) firmware used by numerous vendors, including Bull Atos, Fujitsu,…

A hacking campaign, tracked as Eternal Silence, is abusing Universal Plug and Play (UPnP) to compromise routers and use them to carry out malicious activities. The…

Apple addressed multiple macOS vulnerabilities in the Safari browser that allows threat actors to access users’ online accounts, microphone, and webcam last year. The flaws were…

McAfee addressed a high-severity security flaw in its McAfee Agent software for Windows that lets the hackers run arbitrary code with SYSTEM privileges. The vulnerability, tracked…

A high severity remote code execution vulnerability has been discovered in the KCodes NetUSB kernel module which is used by millions of end-user router devices from…

A new persistent denial of service vulnerability named 'doorLock' was discovered in Apple HomeKit, affecting iOS 14.7 through 15.2. Apple HomeKit is a software framework that…

A vulnerability in Uber's email system allows anyone to send emails on behalf of Uber. This vulnerability could be abused by malicious actors to email 57…

China's internet regulator, the Ministry of Industry and Information Technology (MIIT), has temporarily suspended the partnership with Alibaba Cloud for six months due to the fact…

Two critical and high severity security vulnerabilities in the popular "All in One" SEO WordPress plugin exposed more than 3 million websites to takeover attacks. Automattic…

The Belgian defense ministry announced that it was hit by a cyberattack where the threat actors have exploited the Log4Shell vulnerability. The attack was uncovered on…