Qualcomm UEFI Flaws Expose Microsoft, Lenovo, Samsung Devices to Attacks
Many devices made by Microsoft, Lenovo, Samsung and likely others are affected by potentially serious UEFI firmware vulnerabilities in Qualcomm Snapdragon chips.
read more
Vulnerabilities
Linux Malware Exploits 30 Vulnerabilities To Target WordPress Websites
Heads up, WordPress admins! Researchers have warned users of a new Linux malware that targets…
Linux Malware Exploits 30 Vulnerabilities To Target WordPress Websites on Latest Hacking News | Cyber Security News, Hacking Tools and Penetration Test…
Netgear Patched Serious Vulnerability Affecting Multiple Router Models
Netgear has recently warned users of a serious security vulnerability affecting multiple WiFi router models.…
Netgear Patched Serious Vulnerability Affecting Multiple Router Models on Latest Hacking News | Cyber Security News, Hacking Tools and P…
Predictions 2023: Big Tech’s Coming Security Shopping Spree
The SecurityWeek editorial team huddled over the holidays to look back at the stories that shaped 2022 and, more importantly, to stare into a shiny crystal ball to find the cybersecurity narratives that will dominate this year’s headlines.
read more
Zoho Urges ManageEngine Users to Patch Serious SQL Injection Vulnerability
Zoho this week announced patches for a high-severity SQL injection vulnerability in ManageEngine Password Manager Pro, PAM360, and Access Manager Plus.
ManageEngine is an enterprise software solution offering management capabilities for endpoints, ente…
16 Car Makers and Their Vehicles Hacked via Telematics, APIs, Infrastructure
A group of seven security researchers have discovered numerous vulnerabilities in vehicles from 16 car makers, including bugs that allowed them to control car functions and start or stop the engine.
read more
Play Ransomware Group Used New Exploitation Method in Rackspace Attack
The recent ransomware attack targeting Rackspace was conducted by a cybercrime group named Play using a new exploitation method, the cloud company revealed this week.
read more
Android’s First Security Updates for 2023 Patch 60 Vulnerabilities
Google announced on Tuesday the first Android security updates for 2023, which patch a total of 60 vulnerabilities.
The first part of the update, which arrives on devices as the 2023-01-01 security patch level, addresses 19 security defects in the Fram…
High-Severity Command Injection Flaws Found in Fortinet’s FortiTester, FortiADC
Cybersecurity solutions provider Fortinet this week announced patches for several vulnerabilities across its product portfolio and informed customers about a high-severity command injection bug in FortiADC.
read more
Researcher Says Google Paid $100k Bug Bounty for Smart Speaker Vulnerabilities
Security researcher Matt Kunze says Google paid him a $107,500 bug bounty reward for responsibly reporting vulnerabilities in the Google Home Mini smart speaker.
The issues, the researcher says, could have been exploited by an attacker within wireless …