Category: Security
Cybersecurity news, vulnerabilities, scams, and data breaches, with practical advice to keep your devices and accounts safe.
-
Critical VMware vCenter Vulnerabilities Exploited by Hackers
Critical VMware Vulnerabilities Demand Immediate Action Cyber security professionals have discovered five vulnerabilities within VMware products. Two of these flaws received a critical severity score of 9.8 out of 10. One vulnerability allows attackers to bypass authentication mechanisms in the virtual machine management system. The second critical flaw enables unauthorized actors to execute arbitrary code.…
-
Android SMS of Death: Zero-Click Flaw Crashes Calls
Android SMS of Death: Zero-Click Flaw Crashes Calls According to a recent report by technology outlet Gigazine on October 30, security researcher Mark Blaschczyk has uncovered a severe flaw. He discovered a formidable zero-click denial-of-service vulnerability within the Android operating system. Experts ominously dubbed this exploit the “SMS of Death”. How the Zero-Click Exploit Works…
-
Polymarket Breach Freezes Trading Following Third-Party Hack
Polymarket Halts Operations After Supply Chain Attack On October 29, the prominent cryptocurrency prediction platform Polymarket fell victim to a devastating cyberattack, leading to significant financial losses for its user base. The company officially confirmed that a sophisticated breach compromised a third-party service provider, forcing an immediate, temporary suspension of all trading activities. While Polymarket…
-
Binance Investigates Potential Billion-Dollar Crypto Exploit
Binance Investigates Colossal Cryptocurrency Outflow Binance, the premier global cryptocurrency exchange, has launched an urgent investigation into potential hot wallet compromises following a series of highly suspicious, multi-billion-dollar financial transfers. Independent blockchain analysts currently estimate that the total financial hemorrhaging could reach a staggering $5.8 billion. In swift response, stablecoin issuers Tether and Circle have…
-
Microsoft Fixes Critical eMudhra Key Vulnerability
Microsoft Fixes Critical eMudhra Key Vulnerability Microsoft has urgently deployed critical Windows updates. This action follows the startling discovery of eight incredibly weak cryptographic keys. Specifically, attackers could decipher these keys in a mere 256 attempts. This severe flaw directly impacted the eMudhra Certificate Authority. Consequently, malicious actors could potentially forge authentic-looking digital certificates. Origin…
-
Apple Fixes CoreGraphics Zero-Day Flaw on Older iPhones
Apple Issues Critical Security Patch for Older iPhones Apple recently deployed a vital security patch for older smartphone models, including the iPhone XS, XS Max, and XR. Curiously, newer devices received this exact protection an entire month ago. The update addresses a severe vulnerability within the CoreGraphics framework. This specific flaw allows malicious files to…
-
GitHub Package Firewall: Real-Time Protection for npm Dependencies
GitHub Package Firewall: Real-Time Protection for npm Dependencies A compromised npm library possesses the frightening capability to execute malicious code long before an application even launches. Consequently, GitHub determined it must scrutinize dependencies strictly prior to download. On October 20, the software giant officially introduced the GitHub Package Firewall in public preview. This innovative system…
-
Microsoft Authenticator Vulnerability: Android Flaw Patched
Microsoft Authenticator Vulnerability Exposes Android Tokens For countless enterprises, the primary bastion defending corporate credentials on mobile devices has been a trusted validation application. However, until a critical patch arrived this September, the Android iteration of Microsoft Authenticator harbored a staggering flaw. Specifically, it effectively surrendered sensitive access tokens for email, calendars, and collaborative platforms.…
-
Microsoft .NET Brotli Vulnerability: Urgent Security Patch
Microsoft .NET Brotli Vulnerability: Urgent Security Patch Microsoft urgently deployed out-of-band security patches for the .NET framework. This critical update addresses a severe vulnerability within the Brotli compression algorithm. Hackers can exploit this flaw to compromise applications through manipulated compressed data payloads. Consequently, the cybersecurity community has dubbed this threat with various high-profile names. Security…
-
Tailscale Tailworm Vulnerability Report: Severe Flaws Found
Tailscale Tailworm Vulnerability Report Exposes Critical Flaws Routine server access through a supposedly secure network can rapidly devolve into absolute system control, entirely bypassing the need for administrator credentials. In a comprehensive Tailworm report, security researcher Erica Windisch of Cyberdione Labs meticulously detailed 11 security vulnerabilities afflicting Tailscale and headscale. These alarming discoveries include methods…
Latest News
Stay Connected
Categories
AI Apple Apps & Games EVs Gadgets Google Linux Microsoft Security Smartphones
Search the Archives
Access over the years of investigative journalism and breaking reports
