Tag: vulnerabilities
five flaws under active attack join the federal must-patch list
Federal agencies have three weeks to close a batch of old bugs now confirmed as actively exploited.
Exposed GPU monitors hand attackers the keys to AI clusters
A high-severity NVIDIA exporter flaw and thousands of open monitoring ports let anyone chart, and crash, the hardware running AI…
Unpatched backup server flaws become a path to crypto miners
Attackers are chaining two AhsayCBS bugs to plant webshells and mine cryptocurrency on exposed systems, with no vendor fix yet.
Three teams bank $560,000 for cracking a Pixel 10
A single phone target carried the biggest prizes at Pwn2Own Ireland, where researchers walked away with over $1.2M in total.
Chrome and Firefox releases close over a hundred security holes
Google and Mozilla pushed new builds fixing 32 Chrome flaws and roughly 76 Firefox bugs in a single day of…
OpenSSL patches a DTLS bug that spills server memory to callers
A resend-timer mistake in OpenSSL's UDP handshake can hand leftover heap bytes to the other side of a DTLS session.
Stale branch predictions reopen Spectre in browser JIT engines
Researchers show a practical Spectre v2 variant that harvests stale branch predictions left behind by just-in-time compilers.
Probes hit GeoServer SQLi zero-day within hours of disclosure
watchTowr logged hundreds of exploitation probes against an unpatched GeoServer SQLi bug within hours of its disclosure.