Src |
Date (GMT) |
Titre |
Description |
Tags |
Stories |
Notes |
|
2018-08-19 17:35:05 |
Canadian Telcos Patch Vulnerability in TRS Systems (lien direct) |
All major Canadian internet service providers (ISPs) have patched a vulnerability this week in their telecommunications relay services (TRSs). [...] |
Vulnerability
|
|
|
|
2018-08-18 06:02:00 |
Zero-Day In Microsoft\'s VBScript Engine Used By Darkhotel APT (lien direct) |
A vulnerability in the VBScript engine has been used by hackers working for North Korea to compromise systems targeted by the Darkhotel operation. [...] |
Vulnerability
|
|
|
|
2018-08-08 19:38:00 |
WhatsApp Vulnerability Allows Attackers to Alter Messages in Chats (lien direct) |
Researchers from CheckPoint have figured out a way to manipulate conversations in order to modify existing replies that were received, quoting a message so it appears that it came from another user who may not be part of the group, and sending private messages that can be seen by only one person in a group. [...] |
Vulnerability
|
|
|
|
2018-08-02 07:00:04 |
Microsoft Edge Flaw Lets Hackers Steal Local Files (lien direct) |
Microsoft has fixed a vulnerability in the Edge browser that could be abused against older versions to steal local files from a user's computer. [...] |
Vulnerability
|
|
|
|
2018-07-27 09:25:00 |
364 Idaho Inmates Hacked Their Prison Tablets for Free Credits (lien direct) |
Idaho prison officials announced yesterday in a press release that they've identified 364 inmates who have exploited a vulnerability in their prison-issued tablets and have used it to assign nearly $225,000 worth of digital credits to their tablet accounts. [...] |
Vulnerability
|
|
|
|
2018-07-12 09:22:00 |
Microsoft Rolls Out Patches for "Lazy FP State Restore" Bug Affecting Intel CPUs (lien direct) |
A month after details about the "Lazy FP State Restore" Intel CPU bug surfaced online, Microsoft has rolled out patches to fix this vulnerability at the operating system's level. [...] |
Vulnerability
|
|
|
|
2018-07-06 06:51:04 |
You Can Bypass Authentication on HPE iLO4 Servers With 29 "A" Characters (lien direct) |
Details and public exploit code have been published online for a severe vulnerability affecting Hewlett Packard Integrated Lights-Out 4 (HP iLO 4) servers. [...] |
Vulnerability
|
|
|
|
2018-06-28 11:25:03 |
Every Android Device Since 2012 Impacted by RAMpage Vulnerability (lien direct) |
Almost all Android devices released since 2012 are vulnerable to a new vulnerability named RAMpage, an international team of academics has revealed today. The vulnerability, tracked as CVE-2018-9442, is a variation of the Rowhammer attack. [...] |
Vulnerability
|
|
|
|
2018-06-28 06:56:02 |
Some Spectre In-Browser Mitigations Can Be Defeated (lien direct) |
Some of the protections against the Spectre CPU vulnerability introduced in modern browsers can be defeated, security researchers revealed this week. [...] |
Vulnerability
|
|
|
|
2018-06-27 11:57:02 |
Cisco ASA Flaw Exploited in the Wild After Publication of Two PoCs (lien direct) |
Hackers are exploiting a vulnerability in Cisco software to crash and/or retrieve information from affected devices. Cisco is aware of the issue and has warned customers last week, Friday, June 22. [...] |
Vulnerability
|
|
|