Too many updates from the same vendors come out every month. Either the developers make more mistakes in the development process, or security researchers have begun to actively improve their own competencies. For example, Apple releases updates almost every week. As follows from the news section, attackers regularly use such vulnerabilities in their attacks. Why … Continue reading Only critical vulnerabilities of the week and the newest attacks →
The topics of email vulnerabilities continue, with more and more sophisticated vulnerabilities being exploited in attacks. Notably, new botnets/malware are automating the exploitation of the newest vulnerabilities by transforming them into worm-like weapon. Ransomware is again breaking the record for the amount of money demanded (“We need more gold!”)! Vulnerabilities: rare Android vulnerability in the … Continue reading Ransomware for your Exchange and mobile vulnerabilities ???? →
Not much big news this week. Mainly ransomware attacks, which are actively expanding and the main vulnerabilities of the past week. Vulnerabilities: New PoC / Exploit for iis, car vulnerabilities and few zero-days for Android; Tools: Pentest tools; News: Ransomware activity, more info about February incident and FBI alert; Research: Have you ever try to … Continue reading More ransomware and more zero-days every week →
Several high-profile vulnerabilities in Windows and Apple were fixed this week. Epic confusion/substitution attacks and an interesting vulnerability with secret chats in Telegram. We’ve picked up the top news from the past week. Vulnerabilities: releases from Microsoft and Apple + Telegram vulnerabilities; Tools: Adversary testing; News: Hacker poisoned water in an American city, amazing research, … Continue reading Сouple of massive updates, several f**k-ups with loud vulnerabilities and…