Several New Critical Flaws Affect CODESYS Industrial Automation Software – Tempemail

Cybersecurity researchers on Wednesday disclosed multiple security vulnerabilities impacting CODESYS automation software and the WAGO programmable logic controller (PLC) platform that could be remotely exploited to take control of a company’s cloud operational technology (OT) infrastructure. The flaws can be turned “into innovative attacks that could put threat actors in Continue Reading

New High-Severity Bugs Affect 128 Dell PC and Tablet Models – Tempemail

Cybersecurity researchers on Thursday disclosed a chain of vulnerabilities affecting the BIOSConnect feature within Dell Client BIOS that could be abused by a privileged network adversary to gain arbitrary code execution at the BIOS/UEFI level of the affected device. “As the attacker has the ability to remotely execute code in Continue Reading

New Spectre Flaws in Intel and AMD CPUs Affect Billion of Computers – Tempemail

When Spectre, a class of critical vulnerabilities impacting modern processors, was publicly revealed in January 2018, the researchers behind the discovery said, “As it is not easy to fix, it will haunt us for quite some time,” explaining the inspiration behind naming the speculative execution attacks. Indeed, it’s been more Continue Reading

BIOS PrivEsc Bugs Affect Hundreds of Millions of Dell PCs Worldwide – Tempemail

PC maker Dell has issued an update to fix multiple critical privilege escalation vulnerabilities that went undetected since 2009, potentially allowing attackers to gain kernel-mode privileges and cause a denial-of-service condition. The issues, reported to Dell by researchers from SentinelOne on Dec. 1, 2020, reside in a firmware update driver Continue Reading

Flaws in Two Popular WordPress Plugins Affect Over 7 Million Websites – Tempemail

Researchers have disclosed vulnerabilities in multiple WordPress plugins that, if successfully exploited, could allow an attacker to run arbitrary code and take over a website in certain scenarios. The flaws were uncovered in Elementor, a website builder plugin used on more than seven million sites, and WP Super Cache, a Continue Reading

Critical RCE Flaws Affect VMware ESXi and vSphere Client — Patch Now – Tempemail

VMware has addressed multiple critical remote code execution (RCE) vulnerabilities in VMware ESXi and vSphere Client virtual infrastructure management platform that may allow attackers to execute arbitrary commands and take control of affected systems. “A malicious actor with network access to port 443 may exploit this issue to execute commands Continue Reading

A Set of Severe Flaws Affect Popular DNSMasq DNS Forwarder – Tempemail

Cybersecurity researchers have uncovered multiple vulnerabilities in Dnsmasq, a popular open-source software used for caching Domain Name System (DNS) responses, thereby potentially allowing an adversary to mount DNS cache poisoning attacks and remotely execute malicious code. The flaws, collectively called “DNSpooq” by Israeli research firm JSOF, echoes previously disclosed weaknesses Continue Reading

New Critical Flaws in Treck TCP/IP Stack Affect Millions of IoT Devices – Tempemail

The US Cybersecurity Infrastructure and Security Agency (CISA) has warned of critical vulnerabilities in a low-level TCP/IP software library developed by Treck that, if weaponized, could allow remote attackers to run arbitrary commands and mount denial-of-service (DoS) attacks. The four flaws affect Treck TCP/IP stack version 6.0.1.67 and earlier and Continue Reading

Two Critical Flaws — CVSS Score 10 — Affect Dell Wyse Thin Client Devices – Tempemail

A team of researchers today unveils two critical security vulnerabilities it discovered in Dell Wyse Thin clients that could have potentially allowed attackers to remotely execute malicious code and access arbitrary files on affected devices. The flaws, which were uncovered by healthcare cybersecurity provider CyberMDX and reported to Dell in Continue Reading

Amnesia:33 — Critical TCP/IP Flaws Affect Millions of IoT Devices – Tempemail

Cybersecurity researchers disclosed a dozen new flaws in multiple widely-used embedded TCP/IP stacks impacting millions of devices ranging from networking equipment and medical devices to industrial control systems that could be exploited by an attacker to take control of a vulnerable system. Collectively called “AMNESIA:33” by Forescout researchers, it is Continue Reading