Technical Details of Actively Exploited Android Kernel Flaw Released
A critical Android kernel vulnerability that Google warned was being actively exploited has been thoroughly dissected…
Category
Vulnerability
Critical Tableau Server Flaws Allow Attackers to Execute Malicious Code on Enterprise Systems
Salesforce has disclosed five critical security vulnerabilities in Tableau Server and Desktop that could allow attackers…
NetScaler Zero-Day Exploited for Two Months in Stealth Attacks
A sophisticated cyber threat actor exploited a critical Citrix NetScaler vulnerability for nearly two months before…
WinRAR Zero-Day Exploited to Deploy Backdoors via Fake Job Applications
A previously unknown vulnerability in WinRAR has been actively exploited by Russian-aligned hackers to infiltrate corporate…
New HTTP Desync Attacks Compromise Major CDNs and Government Systems
Security researcher James Kettle has published groundbreaking research exposing fundamental vulnerabilities in HTTP/1.1 that led to…
Critical Flaw Lets Attackers Hijack Train Brakes With $500 Radio Equipment
A critical security vulnerability in America’s railway system allows attackers to remotely hijack train brake controls…
Critical Zero-Day Flaw in Fortinet FortiWeb Allows Complete System Takeover
A severe pre-authentication SQL injection vulnerability in Fortinet’s FortiWeb Fabric Connector has been discovered, allowing attackers…
‘Enter, Exit, Leak’: New CPU Side-Channel Attacks Break Isolation in Modern Processors
Security researchers from Microsoft and ETH Zurich have uncovered four new speculative side-channel vulnerabilities in modern…
Critical CitrixBleed 2 Zero-Day Enables Memory Theft, Bypasses Authentication
A newly disclosed vulnerability in Citrix NetScaler appliances is allowing attackers to steal sensitive memory contents…