AMD last week informed customers that it has updated mitigations for a variant of the Spectre side-channel attack. The update comes in response to research conducted by Intel.
AMD Updates Spectre Mitigations Following Intel Research
Google Attempts to Explain Surge in Chrome Zero-Day Exploitation
14 Chrome Zero-Day Vulnerabilities Exploited in Attacks in 2021
The number of Chrome vulnerabilities exploited in malicious attacks has been increasing over the past years and Google believes several factors have contributed to this trend.
High-Severity Vulnerabilities Patched in Omron PLC Programming Software
Several high-severity vulnerabilities that can be exploited for remote code execution were patched recently in the CX-Programmer software of Japanese electronics giant Omron.
1Password Increases Top Bug Bounty Reward to $1 Million
Password management software vendor 1Password today announced that it is willing to pay up to $1 million to researchers able to steal secrets from its vault.
The top reward is offered as part of the company’s bug bounty program that has been running on Bugcrowd for years.
New Variant of Spectre Attack Bypasses Intel and Arm Hardware Mitigations
A team of researchers from the Vrije Universiteit Amsterdam in the Netherlands has demonstrated a new Spectre attack variant that can bypass hardware mitigations implemented in recent years by Intel and Arm.
Siemens Addresses Over 90 Vulnerabilities Affecting Third-Party Components
Siemens has released 15 new advisories to inform customers about more than 100 vulnerabilities affecting its products, including over 90 security flaws introduced by the use of third-party components.
Microsoft Warns of Spoofing Vulnerability in Defender for Endpoint
As part of its March 2022 security updates, Microsoft on Tuesday patched a class spoofing vulnerability in Defender for Endpoint and warned of its impact on all platforms.
16 Vulnerabilities Found in Firmware of HP Enterprise Devices
Firmware security company Binarly has discovered more than a dozen potentially serious vulnerabilities affecting UEFI firmware present on devices from HP and possibly other vendors.
SAP Patches Critical Security Flaws in Monitoring Solutions
German software maker SAP this week announced the release of 12 new and four updated security notes as part of its March 2022 Patch Day.
Patch Tuesday: Microsoft Fixes Multiple Code Execution Flaws
Microsoft’s Patch Tuesday bundle for this month is a big one: 74 documented vulnerabilities in multiple Windows products and components, some serious enough to lead to remote code execution attacks.
