Cisco patched two critical flaws in its Prime Data Center Network Manager, including one that could be exploited remotely and allow an attacker root access.
VMware Patches Critical Vulnerabilities in vSphere Data Protection
VMware fixed two critical vulnerabilities in its vSphere Data Protection solution this week that could have allowed an attacker to execute commands on the appliance, among other outcomes.
Motorola Moto G4, G5 Vulnerable to Local Root Shell Attacks
Moto G4 and Moto G5 model Motorola phones are vulnerable to kernel command line injection vulnerabilities.
Windows 10 Mitigations Make Future EternalBlue Attacks Difficult
Now that researchers have built a port of EternalBlue to Windows 10, they’ve probably only now caught up to what the NSA has had for a long while.
NSA’s EternalBlue Exploit Ported to Windows 10
Researchers have ported the EternalBlue exploit to Windows 10, meaning that any unpatched version of Windows can be affected by the NSA attack.
Google Fixes 30 Vulnerabilities, Five High Severity, in Chrome 59
Google fixed 30 vulnerabilities, including five high severity issues, in the latest version of Chrome, Chrome 59, on Monday.
IBM Backup Bug Gets Workaround Fix After Nine Months of Exposure
IBM quietly released a workaround fix for a vulnerability in its Spectrum Protect enterprise backup software it has known about since September 2016.
53 Percent of Enterprise Flash Installs are Outdated
More than half of enterprises are exposing themselves to unnecessary risk by running out-of-date versions of Flash.
40,000 Subdomains Tied to RIG Exploit Kit Shut Down
GoDaddy, along with researchers from RSA Security and other companies, shut down tens of thousands of illegal established subdomains tied to the RIG Exploit Kit.
WikiLeaks Dumps CIA Patient Zero Windows Implant
Pandemic is a Windows implant built by the CIA that turns file servers into Patient Zero on a local network, infecting machines requesting files with Trojanized replacements.