Tag: security
Some top ARM GPUs have a potentially worrying security flaw – here’s what you need to know
Chip manufacturing powerhouse ARM has published a security advisory claiming to have addressed a high-severity vulnerability affecting its popular Mali GPU drivers. The vulnerability, tracked as CVE-2023-4211, is allegedly being used in “limited, targeted exploitation” attacks, the company added, as an improper access to freed memory, but could also be…
Read More
Exim mail servers left open to zero-day attacks for over a year
A major flaw in Exim’s mail transfer agent (MTA) software has been detected that has gone without a patch for more than a year. Researchers from Trend Micro’s Zero Day Initiative were tipped off by an anonymous researcher in June last year, about an out-of-bounds write weakness discovered in the…
Read More
“This is not a leak” – Mullvad VPN dismisses alleged accounts breach
One of the most popular VPN services around today has dismissed allegations regarding dozens of its users’ accounts being found on the dark web. Mullvad VPN told TechRadar Pro that the incidient is not a leak, but that the alleged breached VPN accounts were rather given away for free for…
Read More
There’s a dangerous new malware-as-a-service on the rise – here’s what you need to know
A brand new malware-as-a-service (MaaS), capable of a wide range of malicious actions, is being offered on the dark web, researchers have found. Cybersecurity experts from Zscaler ThreatLabz observed a MaaS called BunnyLoader being offered online for $250 (lifetime license). After further analysis, the researchers discovered all of the things…
Read More
Cloudflare security protections can be bypassed in a surprisingly simple way
Cloudflare’s Firewall and DDoS prevention tools carry two worrying vulnerabilities that allow threat actors to send malicious traffic their way, or use their servers to reroute malicious traffic elsewhere, experts have claimed. According to Certitude’s researcher Stefan Proksch, the vulnerabilities can be found in Cloudflare’s Authenticated Origin Pulls, and Allowlist…
Read More