An OpenEMR vulnerability could expose millions of medical records to attackers. The flaw has been patched with OpenEMR 5.0.0 Patch 6 a couple of weeks ago. Unpatched versions could allow an attacker to steal patient records and personal data by exploiting the vulnerability in the setup.php installation script. OpenEMR is a popular open source electronic health records and medical practice […]
OpenEMR vulnerability Read More »
The latest version of macOS High Sierra allows any local user with physical access to take over any Mac by logging in as root and no password.
Multiple Linux distributions are at risk to a vulnerability in systemd service that could lead to a denial-of-service (DoS) attack on unpatched systems.
systemd vulnerability leads to DoS Read More »
On Tuesday, Microsoft issued patches to address 53 vulnerabilities, to include 20 critical fixes, as part of November security updates. Also noteworthy was four of the fixes addressed vulnerabilities with known public exploits (CVE-2017-11848, CVE-2017-11827, CVE-2017-11883 and CVE-2017-8700).
Microsoft November 2017 Security Updates Read More »
Email and data security company Mimecast has exposed a potentially dangerous email vulnerability and exploit called ROPEMAKER.
ROPEMAKER email vulnerability exploit Read More »
LG Electronics confirmed that WannaCry ransomware was responsible for last week’s infections that took down self-service kiosks.
WannaCry ransomware attack on LG Electronics Read More »
The Department of Justice (DOJ) Criminal Division Cybersecurity Unit has developed a framework to assist organizations interested in creating a formal vulnerability disclosure program.
DOJ Framework for vulnerability disclosure Read More »
A free vulnerability scanner, “Eternal Blues”, was developed in late June by a security director Elad Erez to scan for Microsoft Windows SMB Server vulnerabilities, such as those exploited by recent WannaCry campaign and EternalBlue-based attacks.
Eternal Blues vulnerability scanner Read More »
A team of security researchers from several universities have cracked the 1024-bit RSA encryption in theLibgcrypt cryptographic library used by GnuPG.
GnuPG crypto vulnerability exposed Read More »
