Since 2016, the US DoD has received over 50,000 submissions through its vulnerability disclosure program.
The post Pentagon Received Over 50,000 Vulnerability Reports Since 2016 appeared first on SecurityWeek.
New Attack Shows Risks of Browsers Giving Websites Access to GPU
Researchers demonstrate remote GPU cache side-channel attack from within browsers against AMD and NVIDIA graphics cards.
The post New Attack Shows Risks of Browsers Giving Websites Access to GPU appeared first on SecurityWeek.
PoC Published for Critical Fortra Code Execution Vulnerability
A critical directory traversal vulnerability in Fortra FileCatalyst Workflow could lead to remote code execution.
The post PoC Published for Critical Fortra Code Execution Vulnerability appeared first on SecurityWeek.
Discontinued Security Plugins Expose Many WordPress Sites to Takeover
Thousands of WordPress sites are at risk of takeover due to a critical privilege escalation vulnerability in two closed MiniOrange plugins.
The post Discontinued Security Plugins Expose Many WordPress Sites to Takeover appeared first on SecurityWeek.
Cisco Patches High-Severity IOS RX Vulnerabilities
Cisco releases patches for high-severity denial-of-service and elevation of privilege vulnerabilities in IOS RX software.
The post Cisco Patches High-Severity IOS RX Vulnerabilities appeared first on SecurityWeek.
Kubernetes Vulnerability Allows Remote Code Execution on Windows Endpoints
A high-severity Kubernetes vulnerability tracked as CVE-2023-5528 can be exploited to execute arbitrary code on Windows endpoints.
The post Kubernetes Vulnerability Allows Remote Code Execution on Windows Endpoints appeared first on SecurityWeek.
Fortinet Patches Critical Vulnerabilities Leading to Code Execution
Fortinet has released patches for critical code execution vulnerabilities in FortiOS, FortiProxy, and FortiClientEMS.
The post Fortinet Patches Critical Vulnerabilities Leading to Code Execution appeared first on SecurityWeek.
Patch Tuesday: Microsoft Flags Major Bugs in HyperV, Exchange Server
Microsoft ships patches for at least 60 security vulnerabilities in the Windows ecosystem and warned of remote code execution risks.
The post Patch Tuesday: Microsoft Flags Major Bugs in HyperV, Exchange Server appeared first on SecurityWeek.
SAP Patches Critical Command Injection Vulnerabilities
Enterprise software maker SAP documents multiple critical-severity issues and warns of risk of command injection attacks.
The post SAP Patches Critical Command Injection Vulnerabilities appeared first on SecurityWeek.
Adobe Patches Critical Flaws in Enterprise Products
Patch Tuesday: Adobe ships a hefty batch of security updates to fix critical-severity vulnerabilities in multiple enterprise-facing products.
The post Adobe Patches Critical Flaws in Enterprise Products appeared first on SecurityWeek.
