WordPress: Vulnerability Lets Authenticated Attackers Execute Code via File Upload
A WordPress vulnerability lets authenticated attackers upload malicious PostScript files to execute arbitrary code on the server.
Cybersecurity & Protection
All articles in the "Cybersecurity & Protection" category.
Oracle Java SE: Vulnerabilities Affect Confidentiality, Integrity and Availability
Oracle has reported multiple vulnerabilities in Java SE that allow remote attackers to impact confidentiality, integrity and availability.
Lenovo BIOS: Multiple Vulnerabilities Give Attackers Deep System Access
Multiple BIOS vulnerabilities in Lenovo computers allow code execution, data manipulation and privilege escalation at the system level.
Firefox Vulnerability: Saved PDF Content Can Overwrite Files on the System
A Mozilla Firefox vulnerability allows saved PDF content to overwrite other files on the system.
Why Phishing Fails Against FIDO2 and Passkeys
Phishing-resistant sign-in with FIDO2 and passkeys makes stolen credentials worthless and forms the foundation for a solid zero trust architecture.
Atlassian Warns of Critical Flaw in Data Center Products
A critical flaw in Atlassian Data Center products lets attackers read files from the web app without logging in and can lead to privilege escalation.
Anthropic Merges Its Cyber Programs and Introduces Three Access Tiers for Claude
Anthropic merges Project Glasswing and the Cyber Verification Program and splits access to Claude's extended cyber capabilities into three tiers.
Asus Routers: Malicious VPN Config Files Allow Command Execution
Asus patches two router flaws where malicious VPN configuration files and leftover debug code let attackers run commands.
SAP Patch Day: Critical CVSS 10 Flaw in Business Software
SAP patches a critical CVSS 10 vulnerability dubbed "OVERPASS" that allows unauthenticated remote attacks, alongside further flaws in NetWeaver and Commerce Cl…