security Archives - Page 476 of 795

DHS announces ‘Hack DHS’ bug bounty program for vetted researchers

The Department of Homeland Security (DHS) has launched a new bug bounty program dubbed “Hack DHS” that allows vetted cybersecurity researchers to find and report security vulnerabilities in external DHS systems. […]

14 Dec

Microsoft fixes Windows AppX Installer zero-day used by Emotet

Microsoft has patched a high severity Windows zero-day vulnerability exploited in the wild to deliver Emotet malware payloads. […]

14 Dec

Microsoft December 2021 Patch Tuesday fixes 6 zero-days, 67 flaws

Today is Microsoft’s December 2021 Patch Tuesday, and with it comes fixes for six zero-day vulnerabilities and a total of 67 flaws. These updates include a fix for an actively exploited Windows Installer vulnerability used in malware distribution campaigns. […]

13 Dec

Dell driver fix still allows Windows Kernel-level attacks

Dell’s driver fix of the CVE-2021-21551 vulnerability leaves margin for catastrophic BYOVD attacks resulting in Windows kernel driver code execution. […]

13 Dec

Kronos ransomware attack may cause weeks of HR solutions downtime

Workforce management solutions provider Kronos has suffered a ransomware attack that will likely disrupt many of their cloud-based solutions for weeks. […]

13 Dec

Attackers can get root by crashing Ubuntu’s AccountsService

A local privilege escalation security vulnerability could allow attackers to gain root access on Ubuntu systems by exploiting a double-free memory corruption bug in GNOME’s AccountsService component. […]

13 Dec

Bugs in billions of WiFi, Bluetooth chips allow password, data theft

Researchers at the University of Darmstadt, Brescia, CNIT, and the Secure Mobile Networking Lab, have published a paper that proves it’s possible to extract passwords and manipulate traffic on a WiFi chip by targeting a device’s Bluetooth component. […]

13 Dec

Tag: security

DHS announces ‘Hack DHS’ bug bounty program for vetted researchers

Microsoft fixes Windows AppX Installer zero-day used by Emotet

Microsoft December 2021 Patch Tuesday fixes 6 zero-days, 67 flaws

Dell driver fix still allows Windows Kernel-level attacks

Kronos ransomware attack may cause weeks of HR solutions downtime

Attackers can get root by crashing Ubuntu’s AccountsService

Bugs in billions of WiFi, Bluetooth chips allow password, data theft

Ukraine arrests 51 for selling data of 300 million people in US, EU

FTC: Americans lost $148 million to gift card scams this year

Microsoft: These are the building blocks of QBot malware attacks