Vulnerability articles

Browsers are finally addressing 0.0.0.0 Day vulnerability

AMD's update strategy for the Sinkclose vulnerability leaves some processors unprotected

Researchers reveal "Sinkclose" vulnerability affecting nearly all AMD processors since 2006

What just happened? Security researchers at this year's Def Con have presented findings regarding a long-standing albeit recently discovered vulnerability in AMD processors called "Sinkclose." Though rather hard to exploit, the security flaw can potentially yield catastrophic results for any system unlucky enough to fall victim to it.

Ecovacs robot vacuums can be hijacked remotely to spy on you

Windows update flaw allows hackers to downgrade systems to vulnerable versions

What just happened? Another day, another security flaw discovered in Microsoft Windows. The latest arrives courtesy of research presented at the Black Hat security conference, which revealed a design flaw in the Windows Update architecture that allows critical OS components to be downgraded by manipulating the update process.

Sensitive data published through GitHub can be accessed even after being deleted

Secure Boot rendered useless, over 200 PC models from different makers are affected

WTF?! If you thought your laptop, desktop, or server was protected by Secure Boot, think again. A new vulnerability dubbed "PKfail" has left Secure Boot wide open on hundreds of PC and devices across several major tech brands. Researchers at cybersecurity firm Binarly just dropped a bombshell report showing how a leaked cryptographic key has essentially nuked the security guarantees of Secure Boot for over 200 product models.

Samsung is rushing a critical patch to all Galaxy devices amid active exploitation

Microsoft Outlook users should update the client ASAP

These Linksys routers are likely transmitting cleartext passwords

New Intel CPU vulnerability discovered, no new mitigations planned for "Indirector"

Microsoft releases patch to fix critical Wi-Fi flaw in Windows, Windows Server

Microsoft's latest security update fixes a nasty remote code execution bug in Windows Wi-Fi driver

Cracking the code: How researchers recovered millions from a decade-old, password-protected crypto wallet

Finding the flaw: A cryptocurrency holder reached out to renowned hacker Joe Grand about two years ago for help in regaining access to an encrypted digital wallet on his computer reportedly containing about $2 million worth of Bitcoin. Grand turned down the offer. You see, Grand specializes in hardware skills and Michael stored his crypto in a software based wallet.

Security flaw in this TP-Link Archer router receives 10 out of 10 severity rating

College students find exploit to run laundromat machines for free or add money to an account without paying

Google issues yet another Chrome update to fix a high-severity, zero-day vulnerability

Negating all VPNs may have been possible since 2002

WordPress plugin vulnerability poses severe security risk, allows for site takeovers

Nearly all Chinese keyboard apps have encryption flaws, exposing millions of users to keylogging

GPT-4 can exploit zero-day security vulnerabilities all by itself, a new study finds

A hot potato: GPT-4 stands as the newest multimodal large language model (LLM) crafted by OpenAI. This foundational model, currently accessible to customers as part of the paid ChatGPT Plus line, exhibits notable prowess in identifying security vulnerabilities without requiring external human assistance.

LG TV owners should update their firmware, webOS vulnerability found in a few models

New HTTP/2 vulnerability leaves servers in danger of devastating DoS attacks, even from a single TCP connection

Unpatchable Apple Silicon vulnerability could leak encryption keys

In brief: Hardware-based security flaws have become more frequent over the last several years but have mostly affected Intel and AMD processors. Now, Apple joins those ranks with a recently discovered vulnerability that causes Mac M-series CPUs to expose encryption keys. Since it is hardware-based, there is little users can do besides keeping macOS updated.

Ethical hackers show how to open millions of hotel keycard locks

In a nutshell: Over three million hotel room locks in 13,000 buildings in 131 countries are vulnerable to an exploit that lets attackers forge master keys for any door. Although the manufacturer of the affected locks is rolling out a fix, it's unclear when or if every impacted hotel will upgrade its systems.