vulnerability - News, Features, and Slideshows

News

• Singapore flags $5000 rewards in bug bounty expansion

  The Singapore government has expanded its efforts to uncover vulnerabilities in its IT systems with a new program aimed at offering rewards of up US$5000 to white hat hackers.

• Azure Cosmos DB users urged to change digital keys as critical flaw emerges

  Users of Microsoft’s Azure Cosmos DB are being urged to change their digital access keys to protect against a critical vulnerability discovered in the vendor’s cloud platform.

• Language barriers, Lunar New Year and NDA impasse: How ASUS and Kaspersky fell out over Live Update hack

  Kaspersky Lab’s dealings with ASUS after revealing the Taiwanese computer brand’s live software update tool was being used to install a malicious backdoor on its customer’s computers were marred by a language barrier, the timing of Lunar New Year and wrangling over a non-disclosure agreement, it has been revealed.

• Cisco security updates fail on select routers

  Cisco customers using Small Business RV320 and RV325 who updated the online management interface for the dual gigabit WAN VPN routers in January will need to update it again.

• Microsoft reveals and patches Office vulnerability

  Microsoft has revealed an information disclosure vulnerability within Microsoft Office, which improperly discloses contents of its memory.

• Cisco reveals vulnerabilities impacting eight products

  Cisco has revealed a vulnerability within two of its software that allows hackers to cause a denial of service (DoS), which is being actively exploited.

• Fresh Spectre and Meltdown-related chip flaws found

  Cyber security researchers have found a new security flaw that affects a swath of modern computing chips and is related to the Spectre and Meltdown chip flaws.

• Schneider Electric patches vulnerable applications

  ​A remote code execution vulnerability found in two Schneider Electric applications has been revealed by cyber security vendor Tenable.

• Lenovo patches vulnerability inherited via IBM servers

  Lenovo has patched a backdoor it found in some Lenovo and IBM RackSwitch and BladeCentre switches.