Samsung has patched a remote code execution vulnerability that was exploited in zero-day attacks targeting its Android ...

On Thursday, CISA added the flaw to its Known Exploited Vulnerabilities ( KEV) catalog, warning that it has been exploited in the wild and urging federal agencies to patch it by October 2, as mandated ...

Yesterday was Patch Tuesday for September, and Microsoft provided security updates that address 80 new vulnerabilities.

Researchers have disclosed details of a remote CarPlay hack that can allow attackers to spy on drivers or distract them.

More than 350,000 of all Microsoft Exchange servers currently exposed on the Internet haven't yet been patched against the CVE-2020-0688 post-auth remote code execution vulnerability affecting all ...

An elevation of privilege vulnerability in the Windows NTLM authentication protocol and a flaw in Office’s Preview Pain are ...

Plus: Google clears up Gmail concerns, NSA drops SBOM bomb, Texas sues PowerSchool, and more Infosec in brief The US ...

A new vulnerability has been discovered in Microsoft’s Azure Service Fabric Explorer (SFX) that would enable unauthenticated, remote threat actors to execute code on a container hosted on a Service ...

Researchers have found 14 logic flaws in various components of HashiCorp Vault and CyberArk Conjur, two open-source credential management systems, allowing attacks that could bypass authentication ...

There are a huge number of products available in the modern world that come with network connectivity now, when perhaps they might be better off with out it. Kitchen appliances like refrigerators are ...