Vulnerabilities
Brave browser leaks onion addresses in DNS traffic
A bug in the private browsing window with Tor implemented in the Brave web browser could reveal the onion sites visited by the users.
vulnerability
Vulnerabilities
Unpatched security bugs in SHAREit app
The popular file sharing Android app, SHAREit was found to have multiple unpatched vulnerabilities in its code.
Vulnerabilities
Google fixes Chrome zero-day flaw actively exploited in the wild
Google released Chrome 88.0.4324.150 version that addressed an actively exploited zero-day security vulnerability.
Cyber Hacking News
Security firm SonicWall hacked using zero-day in its VPN device
Security hardware manufacturer SonicWall has disclosed that it was a victim of a coordinated attack on its internal systems
Vulnerabilities
Secret backdoor found in ZyXel firewalls and AP controllers
More than 100,000 Zyxel devices are vulnerable to a secret backdoor caused by hardcoded credentials used to update firewall and AP controllers' firmware.
Vulnerabilities
SolarWinds releases updated advisory for SUPERNOVA malware
SolarWinds has released an updated advisory for the SuperNova backdoor which was discovered while investigating the recent SolarWinds supply-chain attack.
Vulnerabilities
WordPress plugin with 5M installs has a critical vulnerability
The new Contact Form 7 version 5.3.2 has been released
Vulnerabilities
Critical TCP/IP flaws pose hacking risk to millions of IoT devices
Several new critical flaws have been discovered in multiple embedded TCP/IP stacks that affects millions of IoT devices ranging from networking equipment and medical devices to…
Vulnerabilities
Critical remote code execution fixed in PlayStation Now
Multiple security flaws were discovered in the PlayStation Now (PS Now) cloud gaming Windows application that allowed hackers to execute arbitrary code on Windows devices running…
Vulnerabilities
Zero-click wormable RCE flaw found in Microsoft Teams
A zero-click remote code execution (RCE) vulnerability was uncovered in Microsoft Teams desktop apps that could have let a threat actor execute arbitrary code by simply…
