23965 shaares
182 results
tagged
vulnerabilities
Forbes has added to the ever-growing pantheon of ways to trick biometrics by printing a 3D head and using it to break into Android phones.
IoT security vendor Armis this week disclosed a total of 8 zero-day bugs in Bluetooth implementations in Android, Windows, Linux, and IOS.
Existing approaches to cybersecurity emphasize either international state-to-state logics (such as deterrence theory) or the integrity of individual information
Russian researcher publishes detailed write-up for VirtualBox zero-day on GitHub after Oracle took 15 months to fix a previous similar issue.
How many servers have been affected remains unclear.
Major sites using Facebook's Single Sign-On don't implement basic security features, potentially making the fallout of last week's hack much worse.
A security vulnerability discovered in Apple’s Device Enrollment Program (DEP) could allow an attacker to gain full access to a corporate or school network. The DEP is a free service offered by Apple to allow new devices to be automatically configured with everything from custom apps to VPN settings. All that is needed is the […]
On Monday, the Energy and Commerce Committee sent letters to MITRE Corporation and the Department of Homeland Security (DHS), recommending reforms be made to the troubled CVE program. In fact, the letters state, if the "deep-seated issues" in the CVE program are ever going to find resolution, DHS and MITRE will need to act sooner, rather than later.
Explains how vulnerabilities get scored. Nice intro to how to think about them!
Technique exploits weakness in design of roaming-enabled IEEE 802.11i/p/q/r wireless
Researchers suggest non-exploitable “chaff bugs” in systems could be a fun way to deter attackers from doing real harm.
Posted by Natalie Silvanovich, Project Zero At Project Zero, we spend a lot of time reporting security bugs to vendors. Most of the time, t...
Dakota Nelson// For a lot of our customers, their first introduction to pentesting is a vulnerability scan from BHIS. This is after talking to the testers, of course, and setting up rules of engagement, sharing which hosts are within scope, and talking over how we, as testers here at BHIS, can best help secure their […]
What are the bumps in the road you can expect and avoid when setting up a threat intel program for your business?
I spent two years trying to get someone to tamper with my laptop, so I could then detect it. Somewhere along the way, I realized this might never happen.
When most people rent a hotel room, security is one of the factors they take into consideration. Along with knowing whether the hotel has room service, air conditioning, or free Wi-Fi, we want to know that we – and our belongings – will be safe for the duration of our stay. The more reputable the […]
by Veit Hailperin
New research from the Center for Democracy and Technology aims to help security researchers decide what level of risk is acceptable for them and their work.
CVE-2018-?????: It turns out Bruce Schneier is just two mischevious kids in a trenchcoat.
The Exploit Database - Exploits, Shellcode, 0days, Remote Exploits, Local Exploits, Web Apps, Vulnerability Reports, Security Articles, Tutorials and more.