Splunk, a leader in data analytics and monitoring, has disclosed 12 new vulnerabilities in its Splunk Enterprise product for Windows, enabling remote code execution (RCE) by malicious actors. On October 14, 2024, the company...
Researchers from the French company HarfangLab have uncovered a new malicious campaign distributing the HijackLoader malware using legitimate digital signing certificates. This malicious activity was first detected in early October, with the primary aim...
ESET has resolved two privilege escalation vulnerabilities in its products for Windows and macOS operating systems. These vulnerabilities allowed attackers to gain unauthorized access to system resources. The first vulnerability, identified as CVE-2024-7400 and...
Google has introduced a new feature enabling Chrome users to synchronize passkeys across devices using a PIN code. This functionality is now available for Windows, macOS, Linux, ChromeOS, and Android. As highlighted by Chrome...
Chinese security researchers have recently uncovered real-world attacks exploiting the CVE-2024-30051 vulnerability (CVSS score: 7.8), which has been linked to cyberattacks involving QakBot, a notorious banking trojan. The vulnerability was first identified by Kaspersky...
Microsoft has alerted users to a critical TCP/IP vulnerability that enables remote code execution (RCE) on all Windows systems with the IPv6 protocol enabled by default. The vulnerability, identified as CVE-2024-38063 (CVSS score: 9.8),...
Last month, Microsoft confirmed that cumulative updates for Windows 10/11 caused some systems with device encryption to automatically reboot into the BitLocker encryption recovery screen. However, this encryption was not intentionally enabled by the...
At the Black Hat 2024 conference, currently taking place in Las Vegas (August 7-8), security researcher Alon Leviev from SafeBreach unveiled two new zero-day vulnerabilities that could be exploited in so-called Downgrade attacks to...
Experts at Cyble report that hackers have discovered a method to bypass Microsoft SmartScreen’s protection to disseminate malware onto user devices. The vulnerability in SmartScreen allows infiltration through Windows Defender and compromises the devices....
In Gogs, a popular self-hosted open-source Git repository service, four unresolved vulnerabilities have been discovered, three of which are critical. These vulnerabilities could allow an authenticated attacker to compromise vulnerable instances, steal or destroy...
Should a Windows 10 and Windows 11 user with a local account find themselves locked out due to a forgotten password, a mechanism known as a “password reset disk” can be utilized. This feature...
Generally speaking, system upgrades for Meta Quest headsets are rather unobtrusive. Often, after taking off the headset and putting it back on the next day, you will notice that the system version has changed....
