Flaws in Ovarro TBox RTUs Could Open Industrial Systems to Remote Attacks

Blog WriterThe Hacker News - Original news source is thehackernews.com

As many as five vulnerabilities have been uncovered in Ovarro’s TBox remote terminal units (RTUs) that, if left unpatched, could open the door for escalating attacks against critical infrastructures, like …

New Bugs Could Let Hackers Bypass Spectre Attack Mitigations On Linux Systems

Blog WriterThe Hacker News - Original news source is thehackernews.com

Cybersecurity researchers on Monday disclosed two new vulnerabilities in Linux-based operating systems that, if successfully exploited, could let attackers circumvent mitigations for speculative attacks such as Spectre and obtain sensitive information from …

PHP’s Git Server Hacked to Insert Secret Backdoor to Its Source code

Blog WriterThe Hacker News - Original news source is thehackernews.com

In yet another instance of a software supply chain attack, unidentified actors hacked the official Git server of the PHP programming language and pushed unauthorized updates to insert a secret backdoor …

Watch Out! That Android System Update May Contain A Powerful Spyware

Blog WriterThe Hacker News - Original news source is thehackernews.com

Researchers have discovered a new information-stealing trojan, which targets Android devices with an onslaught of data-exfiltration capabilities — from collecting browser searches to recording audio and phone calls. While malware …

OpenSSL Releases Patches for 2 High-Severity Security Vulnerabilities

Blog WriterThe Hacker News - Original news source is thehackernews.com

The maintainers of OpenSSL have released a fix for two high-severity security flaws in its software that could be exploited to carry out denial-of-service (DoS) attacks and bypass certificate verification. …

New 5G Flaw Exposes Priority Networks to Location Tracking and Other Attacks

Blog WriterThe Hacker News - Original news source is thehackernews.com

New research into 5G architecture has uncovered a security flaw in its network slicing and virtualized network functions that could be exploited to allow data access and denial of service attacks between …

Another Critical RCE Flaw Discovered in SolarWinds Orion Platform

Blog WriterThe Hacker News - Original news source is thehackernews.com

IT infrastructure management provider SolarWinds on Thursday released a new update to its Orion networking monitoring tool with fixes for four security vulnerabilities, counting two weaknesses that could be exploited …