Category vulnerabilities

SS7 Vulnerability: Hackers are Robbing Bank Accounts in Real-World Attacks

Cybersecurity experts have long flagged serious vulnerabilities in the Signaling System 7 (SS7) protocol, which facilitates communication between mobile networks worldwide. These weaknesses could enable hackers to intercept private phone calls and text messages, even in the face of the highest encryption standards employed by cellular providers. Despite these warnings,…

Read MoreSS7 Vulnerability: Hackers are Robbing Bank Accounts in Real-World Attacks

Google Zero-Day Hunters Discover ‘Severe’ Windows RCE Vulnerability

Critical Security Update for Windows Operating Systems Released Amidst Major Vulnerability Discovery On May 8, 2017, Microsoft issued an urgent security update to address a severe remote code execution (RCE) vulnerability found within its Microsoft Malware Protection Engine (MMPE). This vulnerability impacts a wide range of systems, including Windows 7,…

Read MoreGoogle Zero-Day Hunters Discover ‘Severe’ Windows RCE Vulnerability

Microsoft Releases Urgent Patch for Critical RCE Vulnerability in Windows Malware Scanner

Major Vulnerability Discovered in Microsoft Malware Protection Engine Microsoft’s antivirus solutions, including Windows Defender, have recently been exposed as more vulnerable than previously thought, affecting Windows 7, 8.1, 10, and Windows Server 2016. This revelation follows an out-of-band security update released by Microsoft to address a severe remote code execution…

Read MoreMicrosoft Releases Urgent Patch for Critical RCE Vulnerability in Windows Malware Scanner

All OnePlus Devices at Risk of Remote Attacks from Four Unpatched Vulnerabilities

Critical Vulnerabilities Discovered in OnePlus Devices: Immediate Caution Advised Recent cybersecurity research has uncovered significant vulnerabilities affecting all OnePlus smartphones, including models such as One, X, 2, 3, and 3T. A report by Roee Hay at Aleph Security reveals four critical weaknesses in the devices running OxygenOS 4.1.3 and earlier,…

Read MoreAll OnePlus Devices at Risk of Remote Attacks from Four Unpatched Vulnerabilities

Zero-Day Vulnerabilities in Vanilla Forums Allow Remote Hacking of Websites

A significant cybersecurity issue has surfaced concerning Vanilla Forums, open-source software utilized by over 500,000 websites for online discussions. A Polish security researcher, Dawid Golunski of Legal Hackers, has publicly disclosed two critical zero-day vulnerabilities, potentially allowing unauthenticated remote attackers to compromise targeted websites with relative ease. The vulnerabilities are…

Read MoreZero-Day Vulnerabilities in Vanilla Forums Allow Remote Hacking of Websites

Shadow Brokers Return with New 0-Day Exploits After Leaking WannaCry SMB Vulnerability

The notorious hacking group known as the Shadow Brokers has resurfaced, threatening to unleash a wave of new exploits. This collective previously gained notoriety by leaking the Windows SMB exploit, which facilitated the widespread WannaCry ransomware attack that affected hundreds of thousands of systems globally. Now, with their recent announcement,…

Read MoreShadow Brokers Return with New 0-Day Exploits After Leaking WannaCry SMB Vulnerability

Joomla 3.7.1 Release Addresses Critical SQL Injection Vulnerability

Website owners utilizing the widely adopted Joomla content management system are urged to promptly update their platforms to today’s newly released version to address a critical software vulnerability. Joomla ranks as the second most popular open-source CMS globally, having recently rectified a significant SQL Injection flaw identified within its core…

Read MoreJoomla 3.7.1 Release Addresses Critical SQL Injection Vulnerability

18-Byte ImageMagick Vulnerability Could Have Exposed Images from Yahoo Mail Server

Yahoo Retires ImageMagick After Discovery of Serious Vulnerability In a significant move, Yahoo has officially retired the ImageMagick image-processing library following the identification of a critical vulnerability that posed substantial risks to user privacy. This vulnerability could have potentially provided unauthorized access to private images stored in Yahoo Mail accounts.…

Read More18-Byte ImageMagick Vulnerability Could Have Exposed Images from Yahoo Mail Server