Securezoo Cybersecurity Threat Center blog posts of new vulnerabilities and exploits.
A serious Android security vulnerability dubbed Janus could allow attackers to modify the code in applications without affecting their signatures. Attackers could then use the technique to gain indirect access to the device.
Janus Android vulnerability Read More »
Security researchers have discovered a zero-day remote code execution (RCE) vulnerability (CVE-2017-17215) in the Huawei home router HG532.
Hackers exploit Huawei Routers RCE vulnerability (CVE-2017-17215) Read More »
Google Project Zero researcher Tavis Ormandy discovered a password manager dubbed “Keeper” that comes pre-installed by default with a vulnerability in new Windows 10 Anniversary Update (Version 1607).
Keeper password manager vulnerability Read More »
US-CERT and the CERT Coordination Center (CERT/CC) issued a security advisory on a Transport Layer Security (TLS) vulnerability dubbed “ROBOT”.
ROBOT TLS Vulnerability Read More »
A new vulnerability in TeamViewer remote support software could allow an attacker to gain control of presenter’s or viewer’s session without permission.
TeamViewer permissions bug Read More »
An OpenEMR vulnerability could expose millions of medical records to attackers. The flaw has been patched with OpenEMR 5.0.0 Patch 6 a couple of weeks ago. Unpatched versions could allow an attacker to steal patient records and personal data by exploiting the vulnerability in the setup.php installation script. OpenEMR is a popular open source electronic health records and medical practice
OpenEMR vulnerability Read More »
The latest version of macOS High Sierra allows any local user with physical access to take over any Mac by logging in as root and no password.
Multiple Linux distributions are at risk to a vulnerability in systemd service that could lead to a denial-of-service (DoS) attack on unpatched systems.
systemd vulnerability leads to DoS Read More »
On Tuesday, Microsoft issued patches to address 53 vulnerabilities, to include 20 critical fixes, as part of November security updates. Also noteworthy was four of the fixes addressed vulnerabilities with known public exploits (CVE-2017-11848, CVE-2017-11827, CVE-2017-11883 and CVE-2017-8700).
Microsoft November 2017 Security Updates Read More »
WikiLeaks has released a new series of leaks, called Vault 8, that contains source code and analysis for software designed to run on servers controlled by the CIA.
WikiLeaks Vault 8 leaks Hive Read More »
