Microsoft: powerdir bug gives access to protected macOS user data Post Views: 522 Reading Time: 1 Minute The Microsoft 365 Defender Research Team has reported the vulnerability dubbed powerdir (tracked as CVE-2021-30970) to Apple on July 15, 2021, via the Microsoft...
Dev corrupts NPM libs ‘colors’ and ‘faker’ breaking thousands of apps Post Views: 1,012 Reading Time: 2 Minutes Users of popular open-source libraries ‘colors’ and ‘faker’ were left stunned after they saw their...
Partially Unpatched VMware Bug Opens Door to Hypervisor Takeover Post Views: 699 Reading Time: 2 Minutes A security vulnerability in VMware’s Cloud Foundation, ESXi, Fusion and Workstation platforms could pave the way for hypervisor takeover in virtual environments...
iOS malware can fake iPhone shut downs to snoop on camera, microphone Post Views: 1,416 Reading Time: 1 Minute Researchers have developed a new technique that fakes a shutdown or reboot of iPhones, preventing malware from being removed and allowing hackers to...
Researcher discovers 70 web cache poisoning vulnerabilities, nets $40k in bug bounty rewards Post Views: 629 Reading Time: 1 Minute Despite being a known and well-documented vulnerability, web cache poisoning continues to crop up around the web. In extensive...
Apple iOS vulnerable to HomeKit ‘doorLock’ denial of service bug Post Views: 426 Reading Time: 1 Minute A novel persistent denial of service vulnerability named ‘doorLock’ was discovered in Apple HomeKit, affecting iOS 14.7 through 15.2....