Intel, AMD Dispute Findings on Chip Vulnerabilities

Intel, AMD Dispute Findings on Chip Vulnerabilities

Endpoint Security , Hardware / Chip-level Security After Researchers Release Report, Chipmakers Assert That No New Defenses Are Needed Doug Olenick (DougOlenick) • May 6, 2021     Intel and AMD are disputing the findings of researchers from two universities who say they’ve discovered new attacks on Intel and AMD processors that can bypass most…

Newly Patched Peloton API Flaws Exposed Users’ Private Data

Newly Patched Peloton API Flaws Exposed Users’ Private Data

Application Security , Endpoint Security , Incident & Breach Response Pen Test Partners: Millions Could Have Had Data Exposed Marianne Kolbasuk McGee (HealthInfoSec) • May 6, 2021     Photo: Peloton Security researchers say API flaws could have exposed the private data of millions of Peloton fitness equipment online service users for months before they…

Newly Patched Peloton API Flaws Exposed Users’ Private Data

Newly Patched Peloton API Flaws Exposed Users’ Private Data

Application Security , Endpoint Security , Incident & Breach Response Pen Test Partners: Millions Could Have Had Data Exposed Marianne Kolbasuk McGee (HealthInfoSec) • May 6, 2021     Photo: Peloton Security researchers say API flaws could have exposed the private data of millions of Peloton fitness equipment online service users for months before they…

Millions of Dell Devices Vulnerable to Update Driver Flaw

Millions of Dell Devices Vulnerable to Update Driver Flaw

Endpoint Security , Governance & Risk Management , Patch Management Dell Has Patched Driver Issue Found by SentinelOne Jeremy Kirk (jeremy_kirk) • May 5, 2021     Dell’s headquarters in Round Rock, Texas (Photo: Jjpwiki via Wikipedia/CC) Dell has patched five flaws in a vulnerable firmware update driver that has shipped in millions of laptops,…

Exim Bugs Put Millions of Mail Servers at Risk of Being Hacked (Fixes Available)

Exim Bugs Put Millions of Mail Servers at Risk of Being Hacked (Fixes Available)

Softpedia News / Security 5. May 2021 Multiple critical vulnerabilities have been discovered in the Exim email server software by the Qualys Research Team. Some of these flaws can be chained together to achieve full remote unauthenticated code execution and root privileges.  Exim is a widely used mail transfer agent (MTA) that even comes pre-installed…

DDoS attack knocks Belgian government websites offline

DDoS attack knocks Belgian government websites offline

The attack overwhelmed the systems of a Belgian ISP, leading to widespread service outages and disruptions Many government websites and services in Belgium were knocked offline on Tuesday after Belnet, the internet service provider (ISP) for the country’s public sector, was hit by a massive distributed denial-of-service (DDoS) attack. According to Belnet, the attack started…