Check Point Software discovers four vulnerabilities in MediaTek chips
Check Point Software Technologies has found four vulnerabilities in smartphone chips from MediaTek that could allow hackers to install malware on devices that use them.
Check Point Software’s cybersecurity team detailed the flaws earlier this week. While MediaTek released patches in October. T...
IT and security teams struggle with patching due to complexity, time, and efficiency
It is no secret that many cyberattacks happen because systems have vulnerabilities in software that haven’t been patched yet. However, in 2021, why do companies seem to be slacking on providing the much-needed patches?
Ivanti Inc just published a new report answering that question. The company...
96% of third-party container apps have known vulnerabilities
Palo Alto Networks' Unit 42 published a new report outlining how the software supply chain has come to be seen as a threat to cloud security. The research unit conducted a red team exercise, with a large SaaS provider signed up with Palo Alto Networks.
Within three days, the team found critical ...
Bluetooth BrakTooth vulnerabilities affect billions of devices
A collection of vulnerabilities known as BrakTooth are affecting Bluetooth stacks implanted on system-on-chips (SoC) circuits from several vendors. The vulnerabilities affect various devices, including consumer electronics and industrial equipment.
The associated risks encompass everything from ...
Microsoft’s Windows 365 Cloud PC vulnerability could expose Azure credentials
Microsoft announced that the new Windows 365 Cloud PC was going to be generally available earlier this month. Now, a security researcher has come forward claiming that there is a bug in the offering which can be exploited by attackers to extract Azure users’ credentials in unencrypted plain text....
A severe flaw has been found in Linux Systemd
Systemd, the Linux system and service manager, has become more prevalent than init as a Linux startup and control program. However, it has always faced criticism from some quarters. Now, after the discovery of a security bug in systemd by Qualys, systemd will have even more critics.
How bad is t...
Kaseya’s former employees claim company ignored flaws
Kaseya may be in hot water, as the fallout of the REvil attack reveals new information about the events leading up to the breach. Former employees have come forward claiming that the company knew of the flaws as early as 2017 but took no action.
The claim was made by five former employees, to Bl...
Coursera’s newly discovered flaws may have exposed private user data
It is emerging that online education provider Coursera may have exposed user data. The revelation comes after researchers at Checkmarx, an application security testing company, found vulnerabilities in Coursera's platform.
The flaws were publicized on Thursday and relate to a range of Coursera...
Cisco HyperFlex web interface has critical vulnerabilities
Cisco has revealed that there are some critical bugs in its HyperFlex hyperconverged infrastructure product. CVE-2021-1497 affects the HyperFlex HX Installer Virtual Machine and means a remote hacker could perform a command injection attack.
The attack would be targeted to hit a web management c...
VMware’s cost management tool has a vulnerable ‘unauthorized API’
VMWare has admitted that vRealize Business for Cloud includes an "unauthorized VAMPI API' that is vulnerable to hackers looking for remote code execution capabilities on the virtual appliance. The security flaw is critical and scored 9.8 on the ten-point Common Vulnerability Scoring System.
VAMI...
Spectre is back with new AMD and Intel vulnerabilities discovered
The chip vulnerability named Spectre which was first discovered in 2018 is back again. Researchers have found variants of Spectre that affect all modern x86 processors from AMD and Intel.
Researchers from the University of Virginia, and the University of California at San Diego, detailed the thr...
Chrome 90 is here with seven vulnerabilities patched
Google has finally released Chrome version 90.0.4430.85 for Windows, Mac, and Linux. The release comes with seven security fixes. One of them is a zero-day vulnerability, which was exploited in the wild. The zero-day was assigned the identifier CVE-2021-21224.
Chrome’s technical program manage...