Unpatched Bugs Found Lurking in Provisioning Platform Used with Cisco UC
A trio of security flaws open the door to remote-code execution and a malware tsunami.
The Akkadian Provisioning Manager, which is used as a third-party provisioning tool within Cisco Unified...
Chrome Browser Bug Under Active Attack
Google has patched its Chrome browser, fixing one critical cache issue and a second bug being actively exploited in the wild.
Google is warning that a bug in its Chrome...
Intel Plugs 29 Holes in CPUs, Bluetooth, Security
The higher-rated advisories focus on privilege-escalation bugs in CPU firmware: Tough to patch, hard to exploit, tempting to a savvy attacker.
Intel has unleashed 29 security advisories to plug up...
Google Patches Critical Android RCE Bug
Google’s June security bulletin addresses 90+ bugs in Android and Pixel devices.
Google patched more than 90 security vulnerabilities in its Android operating system impacting its Pixel devices and third-party...
Microsoft Patch Tuesday Fixes 6 In-The-Wild Exploits, 50 Flaws
Researchers discovered a highly targeted malware campaign launched in April, in which a new, unknown threat actor used two of the vulnerabilities that Microsoft said are under active attack.
Microsoft...
Windows Container Malware Targets Kubernetes Clusters
“Siloscape”, the first malware to target Windows containers, breaks out of Kubernetes clusters to plant backdoors and raid nodes for credentials.
Windows containers have been victimized for over a...
‘Battle for the Galaxy’ Mobile Game Leaks 6M Gamer Profiles
Unprotected server exposes AMT Games user data containing user emails and purchase information.
An Elasticsearch server holding personal data of 6 million players of the popular mobile game Battle for...
Building Multilayered Security for Modern Threats
Justin Jett, director of audit and compliance for Plixer, discusses the elements of a successful advanced security posture.
Considering recent announcements of major attacks caused by external malicious actors, including...
HPE Fixes Critical Zero-Day in Server Management Software
The bug in HPE SIM makes it easy as pie for attackers to remotely trigger code, no user interaction necessary.
Hewlett Packard Enterprise (HPE) has fixed a critical zero-day...
Targeted AnyDesk Ads on Google Served Up Weaponized App
Malicious ad campaign was able to rank higher in searches than legitimate AnyDesk ads.
A fake version of the popular remote desktop application AnyDesk, pushed via ads appearing...
