Apple on Monday released fixes for at least 39 security defects in its flagship iOS/iPadOS platform, warning that the most serious of the flaws could expose users to remote code execution attacks.
Critical Vulnerabilities Patched in Veeam Data Backup Solution
Veeam over the weekend announced patches for two critical vulnerabilities impacting Backup & Replication, a backup solution for virtual environments.
The application provides data backup and restore capabilities for virtual machines running on Hyper-V, vSphere, and Nutanix AHV, as well as for servers and workstations, and for cloud-based workloads.
AMD Updates Spectre Mitigations Following Intel Research
AMD last week informed customers that it has updated mitigations for a variant of the Spectre side-channel attack. The update comes in response to research conducted by Intel.
Google Attempts to Explain Surge in Chrome Zero-Day Exploitation
14 Chrome Zero-Day Vulnerabilities Exploited in Attacks in 2021
The number of Chrome vulnerabilities exploited in malicious attacks has been increasing over the past years and Google believes several factors have contributed to this trend.
High-Severity Vulnerabilities Patched in Omron PLC Programming Software
Several high-severity vulnerabilities that can be exploited for remote code execution were patched recently in the CX-Programmer software of Japanese electronics giant Omron.
1Password Increases Top Bug Bounty Reward to $1 Million
Password management software vendor 1Password today announced that it is willing to pay up to $1 million to researchers able to steal secrets from its vault.
The top reward is offered as part of the company’s bug bounty program that has been running on Bugcrowd for years.
New Variant of Spectre Attack Bypasses Intel and Arm Hardware Mitigations
A team of researchers from the Vrije Universiteit Amsterdam in the Netherlands has demonstrated a new Spectre attack variant that can bypass hardware mitigations implemented in recent years by Intel and Arm.
Siemens Addresses Over 90 Vulnerabilities Affecting Third-Party Components
Siemens has released 15 new advisories to inform customers about more than 100 vulnerabilities affecting its products, including over 90 security flaws introduced by the use of third-party components.
Microsoft Warns of Spoofing Vulnerability in Defender for Endpoint
As part of its March 2022 security updates, Microsoft on Tuesday patched a class spoofing vulnerability in Defender for Endpoint and warned of its impact on all platforms.
16 Vulnerabilities Found in Firmware of HP Enterprise Devices
Firmware security company Binarly has discovered more than a dozen potentially serious vulnerabilities affecting UEFI firmware present on devices from HP and possibly other vendors.












