Serious DoS Flaw Impacts Several Yokogawa Products
A serious denial-of-service (DoS) vulnerability impacts several industrial automation products from Japanese electrical engineering and software company Yokogawa Electric. The flaw exists in the Open Communication Driver for Vnet/IP, a…
Read MoreTTCSIRT-191.122718: TT-CSIRT Advisory – Microsoft Security Updates
Microsoft has released a security update stating that a remote code execution issue exists in the scripting engine that handles objects in memory in Internet Explorer ver 9, 10 &…
Read MoreTTCSIRT-190.122718: TT-CSIRT Advisory – Chrome Security Updates
Google has released a security update stating that an use-after-free issue in PDFium could allow for arbitrary code execution (CVE-2018-17481). Successful exploitation of this vulnerability could allow an attacker to…
Read MoreTTCSIRT-189.121318: TT-CSIRT Advisory – Mozilla Security Updates
Mozilla has released a security update stating that it has discovered the following issues with Microsoft FireFox ver 64.0: a) A buffer overflow occurs when drawing and validating elements with…
Read MoreTTCSIRT-188.121318: TT-CSIRT Advisory – WordPress Security Updates
WordPress has released a security update stating that it has discovered the following vulnerabilities with WordPress ver 5.0 and earlier: a) Authors can alter meta data to delete files that…
Read MoreFake iOS Fitness Apps Steal Money
A series of iOS applications posing as fitness-tracking tools have been stealing users’ money by abusing the Touch ID feature, ESET has discovered. The trick used by the fake fitness…
Read More