Security News | HKCERT

Researchers Leak PoC Exploit for a Critical Windows RCE Vulnerability

A proof-of-concept (PoC) exploit related to a remote code execution vulnerability affecting Windows Print Spooler and patched by Microsoft earlier this month was briefly published online before being taken down. Identified as CVE-2021-1675, the security issue could...

The Hacker News 1 Jul 2021 10291 Views

A Well-Meaning Feature Leaves Millions Of Dell PCs Vulnerable

Packet Storm 30 Jun 2021 17510 Views

Data For 700M LinkedIn Users Posted For Sale

Packet Storm 30 Jun 2021 17688 Views

Microsoft Translation Bugs Open Edge Browser to Trivial UXSS Attacks

The bug in Edge's auto-translate could have let remote attackers pull off RCE on any foreign-language website just by sending a message with an XSS payload.

Threatpost 30 Jun 2021 704 Views

Unpatched Virtual Machine Takeover Bug Affects Google Compute Engine

An unpatched security vulnerability affecting Google's Compute Engine platform could be abused by an attacker to take over virtual machines over the network. "This is done by impersonating the metadata server from the targeted virtual machine's point of view," security researcher Imre Rad said...

The Hacker News 29 Jun 2021 8593 Views

Pandemic-Bored Attackers Pummeled Gaming Industry

Akamai's 2020 gaming report shows that cyberattacks on the video game industry skyrocketed, shooting up 340 percent in 2020.

Threatpost 24 Jun 2021 809 Views

'Set it and forget it' attitude to open-source software has become a major security problem, says Veracode

Study finds a whole sea of outdated third-party libraries There's a minefield of security problems bubbling under the surface of modern software, Veracode has claimed in its latest report, thanks to developers pulling third-party open-source libraries into their code bases...

The Register 23 Jun 2021 12301 Views