Pwn2Own 2018: A Showcase of Mobile Vulnerabilities The Pwn2Own 2018 mobile hacking competition, held in Tokyo on November 13-14, demonstrated the ongoing vulnerability of even well-secured smartphones. White hat hackers successfully exploited fully patched devices, including flagship models from renowned manufacturers, revealing concerning security gaps. Key targets included the iPhone…
Recent discoveries made by cybersecurity researchers at Cisco Talos have highlighted critical vulnerabilities in the Atlantis Word Processor, drawing attention to the importance of scrutinizing seemingly harmless email attachments, particularly those in Word or PDF formats. These vulnerabilities could allow remote attackers to execute arbitrary code, potentially compromising the affected…
Facebook Increases Rewards for Bug Bounty Program Amid Concerns Over Vulnerabilities In a significant move aimed at bolstering cybersecurity, Facebook has announced an increase in its bug bounty rewards, reaching up to $40,000 for reporting serious account takeover vulnerabilities across its platforms, including Instagram and WhatsApp. This initiative, highlighted in…
Earlier this week, the Dropbox security team disclosed three severe vulnerabilities affecting the Apple macOS operating system. These vulnerabilities could potentially enable a remote attacker to execute malicious code on a targeted Mac by simply persuading a user to visit a harmful webpage. The vulnerabilities were initially identified by Syndis,…
A significant vulnerability has been identified in Linux operating systems that could potentially allow users with low-privilege accounts to execute unauthorized system control commands. The flaw is attributed to PolicyKit—a toolkit that manages permissions and privileges on Unix-like systems. This issue, designated as CVE-2018-19788, affects PolicyKit version 0.115, which is…
A Ukrainian man has entered a guilty plea in a U.S. court following his extradition from Ireland, admitting to involvement in the notorious Conti ransomware operation—identified as one of the most destructive cybercrime syndicates active during the pandemic years. Oleksii Oleksiyovych Lytvynenko, aged 44, confessed to conspiracy to commit wire…
phpMyAdmin Security Update Addresses Critical Vulnerabilities Developers of phpMyAdmin, one of the leading open-source tools for managing MySQL databases, have released version 4.8.4 to patch several critical vulnerabilities that could enable remote attackers to take control of affected web servers. The update, which addresses significant security flaws, underscores the need…
Following a report from WIRED last week indicating that Meta’s smart glasses app included code for enabling face recognition features, the company removed the code shortly thereafter without providing an explanation or indicating whether such functionality could be reintroduced. Simultaneously, another investigation by WIRED revealed that xAI’s Grok platform continues…
Microsoft Releases Critical Security Updates Addressing 39 Vulnerabilities In a significant move this December, Microsoft has released security patches addressing a total of 39 vulnerabilities across its Windows operating systems and applications during its year-end Patch Tuesday. Among these, ten vulnerabilities have been designated as critical, emphasizing the potential severe…