Vulnerability
Discover expert analysis on vulnerability with news, features and insights from the team at IT Pro.
-
The top malware and ransomware threats for June 2023
News Organizations face a fresh round of cyber threats as criminals continue to evolve their tactics
By Connor Jones Published
News -
Barracuda Networks says hacked devices “must be immediately replaced” despite patches
News Seven-month exploitation of a critical vulnerability enabled persistent backdoor access in its email security gateway devices
By Ross Kelly Published
News -
Azure AD vulnerability gave attackers backdoor authentication control
News Secureworks shared its findings with Microsoft in 2022, and the company has since issued changes to improve audit logs
By Ross Kelly Published
News -
Cisco reveals exploit code is publicly available for critical switch vulnerabilities
News Attackers could target UI vulnerabilities in Cisco switches to execute malicious code
By Rory Bathgate Published
News -
Microsoft links PaperCut server attacks to Cl0p, LockBit ransomware
News Microsoft Threat Intelligence noted attacks were facilitated by GoAnywhere vulnerabilities and the Raspberry Robin worm
By Rory Bathgate Published
News -
LockBit macOS ransomware strain discovered, sparks concerns over shifting tactics
News Researchers noted that while this disclosure should be a cause for concern, the program is currently very buggy
By Ross Kelly Published
News -
OpenAI to pay up to $20k in rewards through new bug bounty program
News The move follows a period of unrest over data security concerns
By Ross Kelly Published
News -
Windows, macOS, and Tesla exploits debuted at Pwn2Own hacking contest
News Researchers took home more than $375,000 in winnings on the first day of the competition
By Ross Kelly Published
News -
Outlook zero day patch causes headaches for Windows admins
News The patch comes along with Microsoft's monthly Patch Tuesday updates which fix 83 vulnerabilities and two total zero days
By Ross Kelly Published
News -
Google pays largest-ever bug bounty worth £500,000
News The company remained tight-lipped over the exploit itself, but speculation is possible given its publicly available rewards breakdown
By Connor Jones Published
News -
Cisco issues patch for critical vulnerability in open source ClamAV antivirus
News Cisco said there is no evidence to suggest the vulnerability has been actively exploited
By Ross Kelly Published
News -
Microsoft patches three zero days, 77 security vulnerabilities in February Patch Tuesday
News Microsoft’s February update contains the largest number of fixes for SQL Server vulnerabilities in several years and nine 'critical' RCE flaws
By Ross Kelly Published
News