Search results for heartbleed

This ancient browser security flaw affecting Safari, Chrome and Firefox is finally being fixed

By Sead Fadilpašić published

0.0.0.0-day flaw cannot be exploited on Windows, but there are still plenty of vulnerable endpoints to target.

Cisco tells Secure Client users to patch immediately or risk VPN security flaw

By Sead Fadilpašić published

Hackers could be accessing your local internal networks, experts are saying, so patch now.

Citrix patches a trio of high-severity security bugs, so be on your guard

By Sead Fadilpašić published

Citrix urges users to apply the patch without delay to stay protected.

Top network performance tool Flowmon has a serious security flaw, so patch now

By Sead Fadilpašić published

Maximum-severity Flowmon flaw allows hackers to take over vulnerable devices.

Millions at risk as popular WordPress database plugin is targeted by hackers — here's what WordPress site owners need to know

By Sead Fadilpašić published

A vulnerability in a popular WordPress plugin leaves the doors open for hackers, and they responded with strength.

Top file transfer tool CrushFTP says a thousand servers are still vulnerable to cyberattack, so patch now

By Sead Fadilpašić published

Older versions granted attackers admin access via HTTPS.

This worrying Git flaw could lead to users leaking credentials

By Sead Fadilpašić published

Git's credential helper did not properly handle authentication messages, leading to credential leakage, experts warn.

OpenSSH vulnerabilities could pose huge threat to businesses everywhere

By Sead Fadilpašić published

Both OpenSSH bugs have been addressed, and users are advised to patch ASAP.

Hackers are exploiting a critical RCE Flaw in a popular FTP server — here's what you need to know

By Efosa Udinmwen published

Attackers are exploiting a critical Wing FTP flaw which allows remote system access, although all attempts have failed so far.

Billions of Chrome users at risk from new data-stealing browser vulnerability - here's how to stay safe

By Efosa Udinmwen published

A zero-day vulnerability in Chrome and Chromium is leaking sensitive data – but true safety lies in broader protection tools.

Apache Foundation urges users to patch now and fix major security worries

By Sead Fadilpašić published

The group listed partial names of 66 victims and promised to share full names soon.

Experts warn this critical PHP vulnerability could be set to become a global problem

By Sead Fadilpašić published

Researchers are saying a PHP-CGI bug is a global problem.

This worrying cyberattack targets one of the key protocols propping up the whole internet

By Sead Fadilpašić published

RADIUS is a decades-old protocol that uses flawed cryptographic design.

Security flaw in popular proxy service leaves 50,000 hosts vulnerable

By Sead Fadilpašić published

More than half of Tinyproxy service hosts affected, and a patch is not yet available.

Top file-sharing service hit with embarrassing security bug that reveals admin passwords

By Sead Fadilpašić published

Three critical vulnerabilities were found in ownCloud open-source cloud platform used by millions of people worldwide.

Google Chrome cookie encryption system can be easily bypassed, experts warn

By Sead Fadilpašić published

New tool shows how to bypass Google Chrome cookie protections and grab sensitive data.

Update now — Fortinet Windows VPN hacked to steal user data

By Sead Fadilpašić published

A months-old vulnerability, with no fix in sight, is being abused to grab VPN passwords.

Hackers target F5 products with dangerous malware

By Sead Fadilpašić published

Vulnerable F5 appliances were being abused for at least three years to steal sensitive data.

SonicWall VPN flaw could allow hackers to hijack your sessions, so patch now

By Sead Fadilpašić published

Security researchers are urging SonicWall users to apply the available fix as soon as possible.

Adobe releases software updates to patch security issues

By Sead Fadilpašić published

Security flaw could have granted hackers the ability to read sensitive information.

BMC flaw left unchecked for 6 years hits Intel and Lenovo servers

By Sead Fadilpašić published

Silent patch missed some years ago, resulting in a vulnerability trickling down the supply chain.

Google Chrome extensions targeted by hackers to steal user passwords

By Craig Hale published

Cyberattack hits users on Christmas Day, but was reportedly resolved in less than 60 minutes.

This WordPress plugin vulnerability has put millions of websites at risk

By Sead Fadilpašić published

A WordPress plugin was found allowing attackers to elevate privileges, but the hole was quickly plugged.

Google has patched another urgent security flaw in Chrome - so update now or be at risk

By Sead Fadilpašić published

High-severity Google Chrome bug is already being abused - and most likely by malicious nation-states.

Palo Alto Networks PAN-OS sees authentication bypass under attack from hackers

By Sead Fadilpašić published

Multiple versions of Palo Alto firewall are under active attack, most likely by different actors.

Google blocks a zero-day flaw used to target government emails

By Sead Fadilpašić published

The Google TAG team discovered a zero-day in Zimbra that allowed hackers to steal email data.

Experts warn Gladinet file sharing tool flaw prompts dangerous cyberattacks - and there's no patch

By Sead Fadilpašić published

Gladinet CentreStack and Triofox are carrying a flaw that enables RCE, but a mitigation is available.

Millions of secrets and auth keys were leaked on GitHub last year

By Sead Fadilpašić published

Devs appaently don't care about exposing sensitive data on GitHub, with many compromising commits remain valid for days.

A clever new infostealer malware is able to easily bypass Google Chrome cookie encryption

By Sead Fadilpašić published

Google’s Application-Bound encryption is broken once again.

Hundreds of Google Firebase websites might have leaked data online

By Sead Fadilpašić published

Sensitive data, including passwords and more, was sitting in plaintext, experts warn.