Small to mid-sized businesses (SMBs) are more targeted by cybercriminals than ever, according to a new AlertLogic report. Echter, there is a way for SMBs to be protected and it involves cushioning the ports that cyber attackers target the most.…
Simjacker is a new set of vulnerabilities that, onderzoekers zeggen, have been exploited for the purpose of surveillance for at least 2 jaar. The Simjacker vulnerabilities appear to be rather sophisticated and complex, in comparison with previously disclosed attacks over…
Two zero-day vulnerabilities were fixed in Microsoft’s September 2019 Patch Tuesday – CVE-2019-1214 and CVE-2019-1215. In totaal, 80 vulnerabilities were fixes of which 17 were listed as critical, and the rest – belangrijk. More about CVE-2019-1214 and CVE-2019-1215 Apparently, beide…
Cybersecurity researchers have outlined a new type of attack involving Intel server-grade processors since 2012. The attack is based on a vulnerability named NetCAT (Network Cache Attack). The vulnerability could allow sniffing data by mounting a side-channel attack over the…
Patch gapping is a serious issue that puts a system at risk of exploits. The problem stems from a gap in time before a patch of a security vulnerability in an open-source software is shipped to users. The vulnerability may…
Dangerous vulnerabilities were recently discovered in Telestar Digital GmbH IoT radio devices. The flaws could allow remote attackers to hijack vulnerable systems. The vulnerabilities were discovered by Vulnerability Laboratory. Some of them are already assigned CVE numbers – CVE-2019-13473 and…
The latest versions of PHP were recently released (PHP version 7.3.9, 7.2.22 en 7.1.32 across several branches) to address several highly critical vulnerabilities in its core and bundled libraries. The most dangerous of these vulnerabilities are the ones that could…
Facebook has announced that they have updated their HHVM server software which removes the possibility of it to be exploited. The company announced that two critical bugs were fund in it. The vulnerabilities allow the hackers to obtain sensitive data…
Een nieuwe zero-day kwetsbaarheid is ontdekt in Android. Als uitgebuit, de zwakke plek zou een lokale aanvaller geven tot hogere privileges op de besmette apparaat. Volgens Zero Day Initiative onderzoekers TrendMicro's Lance Jiang en Moony Li, de fout zich bevindt…
Zerodium, een “leading exploit overname platform voor premium zero-dagen en geavanceerde cyberveiligheid onderzoek”, heeft haar prijslijst bijgewerkt. Blijkbaar, Android exploits zijn nu duurder dan iOS exploits, voor de eerste keer in de geschiedenis. Zerodium is nu veel meer betalen…
Myriad zwakke plekken ontdekt in het zogenaamde basisbeheercontroller controllers (BMCs) Supermicro servers. De gebreken kunnen worden benut in afgelegen aanvallen en kan de toegang tot bedrijfsnetwerken verlenen. Eclypsium onderzoekers wel de kwetsbaarheden USBAnywhere. Beeld: Eclypsium USBAnywhere beveiligingslekken Explained…
Verschillende privilegebreuk exploit ketens werden ontdekt in iOS-apparaten door Google's Threat Analysis Group (LABEL) en Project Zero teams. De kwetsbaarheden werden actief gebruikt door dreiging acteurs die ook gebruikt geïnfecteerde websites drinkplaats aanvallen uit te voeren…
A team of security experts discovered a ‘Complete Control’ weakness in the Windows operating system which can cause a wide variety of dangerous actions. The problem lies within vulnerable that is exploited by the device drivers and operating system allowing…
CVE-2019-14378 is a new vulnerability in QEMU, een open-source hardware virtualisatie pakket. QEMU emuleert processor van een machine door middel van dynamische binaire vertaling en biedt een set van verschillende hardware en het apparaat modellen voor de machine, waardoor zij een verscheidenheid lopen…
The CVE-2019-11510 vulnerability is being used against VPN providers worldwide. The available security reports indicate that a criminal collective is actively seeking to break the security barriers of several providers of VPN services. This is done by exploiting a recent…
