Tags → #vulnerabilities

Vulnerabilities
CWE Releases Top 25 List of Software Vulnerabilities
Nov 21, 2024 The Common Weakness Enumeration (CWE) Top 25 list has been released, identifying critical software vulnerabilities that require attention from developers and security professionals.
Vulnerabilities
Study Identifies Vulnerabilities in Two-Factor Authentication Systems
Nov 20, 2024 A study by researchers from Nankai University, The Hong Kong University of Science and Technology, and the University of Aberdeen has identified critical vulnerabilities in two-factor authentication systems, highlighting the need for improved security measures.
Vulnerabilities
Study Examines Vulnerabilities in TLS Raw Public Key Authentication
Nov 18, 2024 A study presented at the NordSec 2024 conference highlights vulnerabilities in Transport Layer Security (TLS) using Raw Public Key (RPK) authentication, emphasizing the need for improved security measures to address identity misbinding attacks.
Vulnerabilities
Trustwave Research Identifies Risks to U.S. Election System
Nov 13, 2024 Trustwave SpiderLabs has completed a research project assessing risks to the U.S. election system, revealing no significant threats but emphasizing the need for proactive security measures.
Vulnerabilities
Study Identifies Vulnerabilities in Google’s Vertex AI Platform
Nov 12, 2024 A recent study by Palo Alto Networks identified two significant vulnerabilities in Google’s Vertex AI platform that could allow attackers to escalate privileges and exfiltrate sensitive machine learning models.
Industry
HackerOne Report Highlights AI's Impact on Cybersecurity
Nov 11, 2024 The 2024 Hacker-Powered Security Report by HackerOne highlights the growing intersection of artificial intelligence and cybersecurity, revealing concerns among security leaders about AI risks and the increasing focus on AI safety vulnerabilities.
Vulnerabilities
Microsoft Outlook Vulnerabilities Raise Concerns Over Remote Code Execution
Nov 11, 2024 Recent vulnerabilities in Microsoft Outlook, including CVE-2024-21378 and CVE-2024-30103, have raised concerns about remote code execution and NTLM credential leaks, prompting discussions on their implications and the need for enhanced security measures.
Vulnerabilities
Security Vulnerabilities in QEMU Affect Multiple Ubuntu Versions
Nov 10, 2024 On November 8, 2024, security vulnerabilities affecting various versions of Ubuntu and the QEMU emulator were addressed, prompting users to update their systems to mitigate potential risks.