BadAlloc Flaw Affects BlackBerry QNX Used in Millions of Cars and Medical Devices

Blog WriterThe Hacker News - Original news source is thehackernews.com

A major vulnerability affecting older versions of BlackBerry’s QNX Real-Time Operating System (RTOS) could allow malicious actors to cripple and gain control of a variety of products, including cars, medical, …

Unpatched Remote Hacking Flaw Disclosed in Fortinet’s FortiWeb WAF

Blog WriterThe Hacker News - Original news source is thehackernews.com

Details have emerged about a new unpatched security vulnerability in Fortinet’s web application firewall (WAF) appliances that could be abused by a remote, authenticated attacker to execute malicious commands on …

Malicious Ads Target Cryptocurrency Users With Cinobi Banking Trojan

Blog WriterThe Hacker News - Original news source is thehackernews.com

A new social engineering-based malvertising campaign targeting Japan has been found to deliver a malicious application that deploys a banking trojan on compromised Windows machines to steal credentials associated with …

Solution Providers Can Now Add Incident Response to Their Services Portfolio For Free

Blog WriterThe Hacker News - Original news source is thehackernews.com

The Incident Response (IR) services market is in accelerated growth due to the rise in cyberattacks that result in breaches. More and more organizations, across all sizes and verticals, choose …

Multiple Flaws Affecting Realtek Wi-Fi SDKs Impact Nearly a Million IoT Devices

Blog WriterThe Hacker News - Original news source is thehackernews.com

Taiwanese chip designer Realtek is warning of four security vulnerabilities in three software development kits (SDKs) accompanying its WiFi modules, which are used in almost 200 IoT devices made by at least …

Attackers Can Weaponize Firewalls and Middleboxes for Amplified DDoS Attacks

Blog WriterThe Hacker News - Original news source is thehackernews.com

Weaknesses in the implementation of TCP protocol in middleboxes and censorship infrastructure could be weaponized as a vector to stage reflected denial of service (DoS) amplification attacks against any target, surpassing many …

Dozens of STARTTLS Related Flaws Found Affecting Popular Email Clients

Blog WriterThe Hacker News - Original news source is thehackernews.com

Security researchers have disclosed as many as 40 different vulnerabilities associated with an opportunistic encryption mechanism in mail clients and servers that could open the door to targeted man-in-the-middle (MitM) …