Google paid out $10 million via its bug bounty programs in 2023, bringing the total to nearly $60 million since 2010.
The post Google Paid Out $10 Million via Bug Bounty Programs in 2023 appeared first on SecurityWeek.
Ultimate Member Plugin Flaw Exposes 100,000 WordPress Sites to Attacks
A high-severity XSS vulnerability in the Ultimate Member plugin allows attackers to inject scripts into WordPress sites.
The post Ultimate Member Plugin Flaw Exposes 100,000 WordPress Sites to Attacks appeared first on SecurityWeek.
Critical Vulnerability Allows Access to QNAP NAS Devices
Critical-severity vulnerability could allow network attackers to access QNAP NAS devices without authentication.
The post Critical Vulnerability Allows Access to QNAP NAS Devices appeared first on SecurityWeek.
Possibly Exploited Fortinet Flaw Impacts Many Systems, but No Signs of Mass Attacks
150,000 systems possibly impacted by the recent Fortinet vulnerability CVE-2024-21762, but there is still no evidence of widespread exploitation.
The post Possibly Exploited Fortinet Flaw Impacts Many Systems, but No Signs of Mass Attacks appeared first on SecurityWeek.
In Other News: Google AI Hacking, Font Vulnerabilities, IBM Training Facility
Noteworthy stories that might have slipped under the radar: Google AI bug bounties, font vulnerabilities, IBM opens new training facility.
The post In Other News: Google AI Hacking, Font Vulnerabilities, IBM Training Facility appeared first on SecurityWeek.
Cisco Patches High-Severity Vulnerabilities in VPN Product
High-severity flaws in Cisco Secure Client could lead to code execution and unauthorized remote access VPN sessions.
The post Cisco Patches High-Severity Vulnerabilities in VPN Product appeared first on SecurityWeek.
CISA Warns of Pixel Phone Vulnerability Exploitation
CISA adds Pixel Android phone (CVE-2023-21237) and Sunhillo SureLine (CVE-2021-36380) flaws to its known exploited vulnerabilities catalog.
The post CISA Warns of Pixel Phone Vulnerability Exploitation appeared first on SecurityWeek.
Apple Blunts Zero-Day Attacks With iOS 17.4 Update
Apple rolls out urgent patches to fix multiple security flaws in its flagship iOS platform and warned about zero-day exploits in the wild.
The post Apple Blunts Zero-Day Attacks With iOS 17.4 Update appeared first on SecurityWeek.
VMware Patches Critical ESXi Sandbox Escape Flaws
The most serious flaws allow hackers with local admin rights to execute code as the virtual machine’s VMX process running on the host.
The post VMware Patches Critical ESXi Sandbox Escape Flaws appeared first on SecurityWeek.
Critical Vulnerability Exposes TeamCity Servers to Takeover
A critical authentication bypass in TeamCity allows remote attackers to take full control of vulnerable servers.
The post Critical Vulnerability Exposes TeamCity Servers to Takeover appeared first on SecurityWeek.
