Ken's Automated News Feed Aggregator
Honor has started pushing a software update to its Honor 7C devices with the December 2019 security patch. The update is reportedly rolling out to Honor 7C devices globally. However, it still doesn’t bring the EMUI 9.1 OS to the smartphone.
According …
The very first Pwn2Own hacking competition that exclusively focuses on the industrial control systems (ICS) has kicked off in Miami. So far, a total of $180,000 has been awarded for pwning five different products. The contest hosts at Trend Micro’s Zer…
Smart organizations in the business of building software know they need a mix of application testing tools to help ensure the code they produce is high-quality and secure. Many have already taken the steps to secure the code their developers write with…
Security vulnerabilities in some AMD ATI Radeon graphics cards could allow attackers to remotely execute code or cause a denial of service condition, researchers from Cisco Talos have warned. A total of four security flaws were disclosed, all of them i…
An update for kernel is now available for Red Hat Enterprise Linux 8.0 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, …
An update that fixes two vulnerabilities is now available. SUSE Security Update: Security update for the Linux Kernel (Live Patch 33 for SLE 12 SP1) ______________________________________________________________________________ Announcement ID: SUSE-SU…
Software that writes more data to a memory buffer than it can hold creates vulnerabilities that attackers can exploit. Good software development practices can stop buffer overflows from happening.
rclassenlayouts / Aleksei Derin / Getty Images
Buffer…
1) OS Command Injection. Severity: High. CVSSv3: [PCI] CVE-ID: CVE-2019-17096. CWE-ID: Description. CWE-78 – Improper Neutralization of Special Elements used in an OS Command (‘OS Command Injection’) The vulnerability allows a remote attacker to execut…
An anonymous reader quotes a report from Ars Technica: Internet routers running the Tomato alternative firmware are under active attack by a self-propagating exploit that searches for devices using default credentials. When credentials are found, the e…
Claudio Bozzato, Lilith Wyatt and Dave McDaniel of Cisco Talos discovered these vulnerabilities. Blog by Jon Munshaw. The Bitdefender BOX 2 contains two remote code execution vulnerabilities in its bootstrap stage. The BOX 2 is a device that protects u…