Search results for heartbleed

Google has patched another urgent security flaw in Chrome - so update now or be at risk

By Sead Fadilpašić published

High-severity Google Chrome bug is already being abused - and most likely by malicious nation-states.

An incredibly popular JavaScript library might have some worrying malware issues

By Sead Fadilpašić, Sead Fadilpašić published

A script with 800,000 weekly downloads allows for RCE, but a fix is available.

A clever new infostealer malware is able to easily bypass Google Chrome cookie encryption

By Sead Fadilpašić published

Google’s Application-Bound encryption is broken once again.

SonicWall tells customers to patch SonicOS flaw allowing hackers to crash firewalls

By Sead Fadilpašić published

A high-severity flaw was found in SonicWall OS SSLVPN which can be used to trigger DoS.

Google patches worrying Chrome zero-day flaw being exploited in the wild - here's how to stay safe

By Sead Fadilpašić, Sead Fadilpašić published

A bug in Google Chrome V8 allowed for arbitrary code execution, and is being actively exploited.

Google quietly released a security fix for a worrying Chrome zero-day flaw, so patch now

By Sead Fadilpašić published

The Google Chrome flaw is apparently being abused in the wild, so update now or face the risks.

Thousands of SonicWall VPN devices are facing worrying security threats

By Sead Fadilpašić published

Many SonicWall VPNs are running outdated and vulnerable software versions.

Top Bluetooth chip security flaw could put a billion devices at risk worldwide

By Sead Fadilpašić published

ESPC32 Bluetooth chip, which has been sold in the billions, allegedly allowed remote access and backdoor deployment.

Massive Orange Belgium data breach may have hit over 850,000 customers - here's what we know

By Sead Fadilpašić published

Passwords and financial data were not taken, but customers should still be on their guard.

A worrying critical security flaw in Apache Tomcat could let hackers take over servers with ease

By Sead Fadilpašić published

A "dead simple" attack allows threat actors to take over vulnerable Apache Tomcat servers.

Google Chrome security flaw could have let hackers spy on all your online habits

By Sead Fadilpašić published

A new Google Chrome bug was being used to spy on businesses.

Cloudflare CDN flaw could expose user location simply by sending an image

By Sead Fadilpašić published

A zero-click flaw abused the way Cloudflare cached certain images but it was quickly resolved.

Experts warn millions of email servers could be vulnerable to attack

By Ellen Jennings-Trace published

Research reveals millions of servers without TLS encryption are at risk.

Google Gemini security flaw could have let anyone access systems or run code

By Sead Fadilpašić published

Having an allow-list in Gemini CLI caused a few issues, but Google patched it up.

Millions of WordPress sites could be at risk from "one of the most serious" plugin flaws ever found

By Sead Fadilpašić published

WordPress users urged to double-check their websites following update to worrrying security flaw.

CISA is warning of a worrying Git security flaw, so stay alert

By Sead Fadilpašić published

A high-severity Git bug has been spotted and flagged, with government agencies given weeks to patch.

Top file synchronization tool Rsync security flaws mean up to 660,000 servers possibly affected

By Sead Fadilpašić published

Security researchers found six flaws in popular Rsync tool including a critical-severity RCE bug.

Textbook and testing giant Pearson hit by cyberattack, customer data leaked

By Sead Fadilpašić published

Another case of exposed Git configuration files leading up to a larger compromise, this time against education giant Pearson.

Experts warn a maximum severity GoAnywhere MFT flaw is now being exploited as a zero day

By Sead Fadilpašić published

Hackers started abusing GoAnywhere MFT bug a week before the patch was released.

Rogue VPN servers used to spread malware via malicious updates

By Sead Fadilpašić published

Hackers can get victims to connect to a malicious VPN server, then use it to drop malware.

Another top vibe coding platform has some worrying security flaws - here's what we know

By Sead Fadilpašić published

Experts warn of a way to access other people’s private app data on Base44.

SonicWall customers told to reset credentials following firewall data breach

By Sead Fadilpašić published

SonicWall suffered a brute-force attack which could affect thousands of its customers.

SonicWall tells admins to patch worrying SSLVPN flaw immediately

By Sead Fadilpašić published

A patch is already available, so SonicWall users should update immediately.

Google patches another worrying Chrome security flaw - so update now, or be at risk

By Sead Fadilpašić published

A newly found Google Chrome zero-day is being exploited in the wild, so skip patching at your own risk.

Hackers are targeting a WordPress security flaw that was supposed to have been fixed

By Sead Fadilpašić published

A fix is out there but apparently lacks awareness.

WatchGuard warns users Firebox firewalls may have a critical issue - here's what we know

By Sead Fadilpašić published

A critical flaw was found in a popular WatchGuard firewall - but it was not yet picked up by threat actors.

Top CMS Sitecore patches critical zero-day flaw being hit by hackers

By Sead Fadilpašić published

Sitecore flaw was being used to deploy reconnaissance malware as well as numerous legitimate tools.

Around 50,000 Cisco firewalls are vulnerable to attack, so patch now

By Sead Fadilpašić published

Hackers are already targeting Cisco firewalls - and it's only a matter of time before they find yours, experts warn.

Security flaw in vBulletin forum software exploited by hackers

By Sead Fadilpašić published

Two critical-severity flaws recently found in popular forum software, with one being actively used.

Firefox patches zero-day security flaw days after Chrome fixes the same issue

By Sead Fadilpašić published

A bug similar to one recently found in Google Chrome was also spotted in Firefox and subsequently fixed.