Vulnerabilities

Apple has released crucial security updates across its range of platforms—iOS, iPadOS, macOS, visionOS, and Safari—addressing two zero-day vulnerabilities that have been actively exploited by cyber attackers. The vulnerabilities, identified as CVE-2024-44308 and CVE-2024-44309, pose significant risks. The first flaw, CVE-2024-44308, resides in JavaScriptCore and could allow malicious web content ...

In a recent analysis, InsiderSecurity delves into the intricacies of the Outlook vulnerability, CVE-2023-23397, shedding light on potential exploitation techniques and proposing early detection methods. As Microsoft rushes to address this vulnerability with a recent patch, the severity of the situation becomes evident, given its exploitation over the past year. ...

In a recent analysis of Sierra Wireless routers, Forescout’s Vedere Labs made a significant discovery—21 new vulnerabilities that not only pose a threat to operational technology (OT) and IoT devices but also reveal the broader challenge of addressing security issues in the realm of critical infrastructure. This research, published by ...

Qualcomm, a renowned chipmaker, made public additional information about three high-severity security flaws that had fallen victim to “limited, targeted exploitation.” in October 2023. These vulnerabilities not only underscore the perpetual arms race in cybersecurity but also highlight the importance of proactive disclosure and collaborative efforts to address potential threats. ...