NVIDIA Addresses Critical Security Flaw in Container Toolkit and GPU Operator
NVIDIA has patched a severe vulnerability, CVE-2024-0132, allowing threat actors to potentially gain full root privileges on host systems through container escapes.
Google’s Transition to Rust Programming Reduces Android Memory Safety Vulnerabilities by 52%
Google’s adoption of memory-safe languages like Rust has significantly decreased memory safety vulnerabilities in Android over a six-year period.
New Flaws in Sonos Smart Speakers Allow Hackers to Eavesdrop on Users
Researchers from NCC Group have identified vulnerabilities in Sonos smart speakers that could allow attackers to eavesdrop on users by exploiting memory corruption and arbitrary code execution flaws.
CISA Adds Twilio Authy and IE Flaws to Exploited Vulnerabilities List
Two critical vulnerabilities, CVE-2012-4792 in Internet Explorer and CVE-2024-39891 in Twilio Authy, pose significant risks to organizations and individuals, with potential exploitation and data exposure threats.
Microsoft Yet to Address Seven Windows Privilege Escalation Vulnerabilities Discovered at Pwn2Own 2024
Microsoft has yet to address seven Windows privilege escalation vulnerabilities discovered at Pwn2Own 2024, raising concerns about potential exploitation by threat actors.
Microsoft Azure’s HDInsight Big-Data Analytics Service Found to Have High-Risk Vulnerabilities
Orca security firm discovers three vulnerabilities in Microsoft Azure’s HDInsight big-data analytics service, including denial-of-service and privilege escalation bugs, which have been promptly addressed by Microsoft.
Arctic Wolf Discovers New CACTUS Ransomware Campaign Targeting Qlik Sense Platform
Arctic Wolf cybersecurity researchers have uncovered a sophisticated CACTUS ransomware campaign that exploits vulnerabilities in the Qlik Sense platform, highlighting the need for organizations to upgrade and implement robust security measures.
