This is the latest zero-day released by security researcher Nightmare Eclipse, despite Microsoft publicly threatening to take legal action against them.

Qualys said the vuln gives any local user root access to systems running the most popular version of Sudo. A doozy of a bug that could allow any local user on most Linux or Unix systems to gain root ...

The RCE bug affects versions below 4.4 of the Slack desktop app. A critical vulnerability in the popular Slack collaboration app would allow remote code-execution (RCE). Attackers could gain full ...

U.S. power and electronics giant Eaton has fixed a security vulnerability that allowed a security researcher to remotely access thousands of smart security alarm systems. Security researcher Vangelis ...

It's a Friday, people, which means there's more bad news from Facebook. Facebook disclosed a data breach on Friday that affected 6.8 million users. The trouble once again came from the connectivity of ...

Google and WhatsApp have confirmed they are aware of a bug that makes it appear as if WhatsApp is accessing phones' microphones unnecessarily on some Android devices. The issue first cropped up a ...

The maintainers of the Apache Roller open source blogging platform patched a maximum severity bug that allowed continued access to the app even after a user changed their password. The issue had to do ...

HackerOne has awarded $20,000 to a researcher that disclosed a way to access private bug reports on the platform. The irony cannot be lost on the bug bounty as HackerOne is used by a variety of ...

A bug in Windows 10 allowed UWP apps (Universal Windows Platform) to have access to the entire file system in Windows without permission from the user. This could have allowed a malicious app to ...