Vulnerabilities & Exploits

In 2019, cybercriminals looked at the malicious mobile routines that worked in the past and adjusted these to make them more sophisticated, persistent, and profitable online and offline.

Notorious IoT malware Mirai has seen a recent increase in updates as a new variant emerges and a new vulnerability is targeted.

An RCE vulnerability affecting Windows have been discovered, with Microsoft rating its severity as critical.

A WordPress GDPR plugin for managing cookies exposed sites to a vulnerability that allowed privilege escalation.

Des menaces complexes et persistantes ont envahi le panorama de la cybersécurité en 2019. Les attaques par ransomware ont trouvé une niche dans les cibles de premier plan, tandis que les arnaques par phishing ont inventé de nouveaux subterfuges.

The ThemeGrill Demo Importer plugin was found to leave nearly 100,000 WordPress websites vulnerable to threats.

On January 17, Microsoft published an advisory (ADV200001) warning users about CVE-2020-0674, a remote code execution (RCE) vulnerability involving Microsoft’s Internet Explorer (IE) web browser.

Security researchers have released PoCs for critical vulnerability CurveBall (CVE-2020-0601).

Researchers uncovered an information disclosure vulnerability (designated as CVE-2019-1463) affecting Microsoft Access, which occurs when the software fails to properly handle objects in memory.