Researchers from NCC Group have identified vulnerabilities in Sonos smart speakers that could allow attackers to eavesdrop on users by exploiting memory corruption and arbitrary code execution flaws.
Two critical vulnerabilities, CVE-2012-4792 in Internet Explorer and CVE-2024-39891 in Twilio Authy, pose significant risks to organizations and individuals, with potential exploitation and data exposure threats.
Microsoft has yet to address seven Windows privilege escalation vulnerabilities discovered at Pwn2Own 2024, raising concerns about potential exploitation by threat actors.
Orca security firm discovers three vulnerabilities in Microsoft Azure’s HDInsight big-data analytics service, including denial-of-service and privilege escalation bugs, which have been promptly addressed by Microsoft.
Arctic Wolf cybersecurity researchers have uncovered a sophisticated CACTUS ransomware campaign that exploits vulnerabilities in the Qlik Sense platform, highlighting the need for organizations to upgrade and implement robust security measures.
