vulnerabilities
Latest about vulnerabilities

Businesses are struggling to address vulnerabilities hidden in phantom dependencies
By Efosa Udinmwen published
Companies could reduce their remediation efforts by nearly 90% just by doing some function-level reachability analysis, research says.

Apple says Mac users are being targeted by dangerous zero-day attacks, so update now
By Benedict Collins published
Two zero-day vulnerabilities have been found and patched by Apple, with both potentially exploited in the wild.

China cyber pros say Intel is installing CPU backdoors on behalf of NSA
By Benedict Collins published
China says the NSA has been installing backdoors in Intel CPUs for over a decade.

These vulnerabilities in Apache HTTP Server enable HTTP Request Smuggling and SSL Authentication Bypass, posing severe threats to organizations worldwide
By Efosa Udinmwen published
Protect your systems by patching Apache HTTP Server and reviewing configurations immediately.

Google increases Chrome bug bounty rewards up to $250,000
By Craig Hale published
Google will pay the most detailed report of RCE in a non-sandboxed process up to $250k as a thank you.

GitHub rolls out new tool to fix code errors even before you see them
By Craig Hale published
Copilot Autofix will address vulnerabilities by fixing code, and it’s set to roll out free to open source GitHub developers.

Google has a new AI-powered security kit that should give human researchers a break
By Craig Hale published
Google researchers have put AI to the test identifying vulnerabilities, and it performed so well that humans could take a break.

Ivanti pledges to “set a new standard” following recent exploits
By Craig Hale published
Significant investment and hefty changes promise to deliver greater security after recent Ivanti headlines.

Google paid out over $10 million in bug bounties last year
By Craig Hale published
2023 saw Google award $10 million to 632 researchers for finding bugs and vulnerabilities in its products.

If you’re using this router brand, you may want to disconnect now — security researchers found more vulnerabilities and a hardcoded password in Totolink hardware
By Lewis Maddison published
Many vulnerabilities have been recently found in Totolink routers, but the problems aren't anything new.
Sign up for breaking news, reviews, opinion, top tech deals, and more.