Adobe Issues September Security Patches for Critical Vulnerabilities in Flash Player and ColdFusion Adobe has announced its September 2018 security updates, addressing a total of ten vulnerabilities related to its Flash Player and ColdFusion products. Among these, six have been categorized as critical, particularly affecting ColdFusion, and potentially allowing attackers…
Major URL Spoofing Vulnerability Discovered in Microsoft Edge and Apple Safari A significant security vulnerability has emerged that allows attackers to spoof URLs in the Microsoft Edge browser on Windows and Apple Safari on iOS. This flaw underscores escalating concerns over online security, particularly for users of these popular web…
A significant security vulnerability has emerged involving Tesla’s Model S key fob system, enabling a team of researchers to hack the luxury electric vehicle in under two seconds. Despite Tesla implementing various defensive measures against cyber threats, researchers from the Computer Security and Industrial Cryptography (COSIC) group at KU Leuven…
The urgency is palpable for Windows and Linux users, who must urgently update cryptographic keys to safeguard their systems from firmware-based UEFI infections. This type of malware is particularly insidious, as it executes before the operating system and antimalware solutions can activate, making it especially challenging to detect and eradicate.…
New Cold Boot Attack Poses Threat to Sensitive Data on Modern Computers Security researchers have unveiled a sophisticated new variant of the Cold Boot Attack, a technique that allows unauthorized access to sensitive information—such as passwords and encryption keys—stored on many contemporary systems, including those utilizing full disk encryption. Traditionally…
Western Digital My Cloud NAS Devices Vulnerable to Authentication Bypass Attack Security researchers have identified a serious vulnerability affecting Western Digital’s My Cloud Network-Attached Storage (NAS) devices, allowing unauthenticated attackers to gain administrative access. This flaw, which has been publicly disclosed by researchers at Securify, poses a significant risk, especially…
Vulnerability Discovered in EE 4GEE Mini Modem Poses Serious Security Risk A critical vulnerability has been identified in the 4GEE Mini modem, a product offered by the mobile operator EE in the UK. This security flaw could enable attackers to execute malicious software on Windows computers that have connected to…
Unpatched Zero-Day Vulnerability Discovered in Microsoft Windows A critical zero-day vulnerability affecting all supported versions of the Microsoft Windows operating system, including server editions, has been publicly disclosed. This flaw comes to light following Microsoft’s failure to address a responsibly reported bug within the 120-day deadline set by the Zero…