Website admins, brace yourselves. Fixes for what are believed to be uncommonly severe vulnerabilities are scheduled to drop in a […]
Category: vulnerabilities
PSA: Patch your Plex media server before someone hacks it
The published exploit chain was part of a proof-of-concept attack that the first researcher included when submitting a bug report […]
Fridge hack costing millions and sparking fires stemmed from poor security
Besides running controllers with outdated firmware, the affected stores likely also failed to put the devices behind a VPN and […]
Attackers have been exploiting critical Zimbra flaw to steal emails
Hackers have been exploiting a critical vulnerability in the Zimbra Collaboration Suite in an attempt to obtain email backups and […]
Vulnerability giving attackers full control of Macs is under active exploitation
Dutch officials have warned that a high-severity macOS vulnerability that allows attackers to execute malicious code is under active exploitation. […]
Thousands of servers can be backdoored by exploiting buggy motherboard controllers
Baseboard management controllers from the world’s biggest manufacturers are a security mess. A data center corridor lined with rows of […]
Google pays $250K for Linux vulnerability allowing guest VM escapes
A Linux vulnerability that allows untrusted virtual machines to gain root access to host machines is one of two high-severity […]
Apple patches high-severity eavesdropping vulnerability in Beats Studio Buds
Security firm Sentinel One has a deeper dive into CVE-2025-20701 here. Heinze and Steinmetz said last year that the full […]
Locked in heated rivalry with researcher, Microsoft fixes 0-day they disclosed
Tuesday’s patch bundle also fixed MiniPlasma, a separate vulnerability disclosed by Nightmare Eclipse. Microsoft said in an email that the […]
High-severity vulnerability in Linux caused by a single errant character
When a verdict map is deleted from memory, catchall elements are deactivated and a chain’s reference counter is decremented. When […]