New Side-Channel Vulnerability Leaks Sensitive Data From Intel Chips
A newly revealed side-channel attack can leak encrypted data from Intel microprocessors that use a Simultaneous Multithreading (SMT) architecture. Dubbed PortSmash and tracked as CVE-2018-5407, the vulnerability affects all CPUs…
Read MoreTTCSIRT-177.102918: TT-CSIRT Advisory – Mozilla Security Updates
Mozilla has released a security stating that it has discovered the following vulnerabilities in Mozilla Firefox ver 63.0: a) Crash with nested event loops – when manipulating user events in…
Read MoreTTCSIRT-176.102918: TT-CSIRT Advisory – Linux Security Updates
It has been discovered that several Linux Operating Systems including Red Hat, CentOS, Debian, Ubuntu and OpenBSD can be affected by a serious X.Org vulnerability. This issue is caused by…
Read MoreZero Day in jQuery Plugin Impacts Thousands of Applications
Thousands of projects are possibly impacted by a jQuery File Upload plugin vulnerability that has been actively exploited in the wild, a security researcher has discovered. Tracked as CVE-2018-9206, the…
Read MoreFlaw in Media Library Impacts VLC, Other Software
A serious vulnerability in the LIVE555 Streaming Media RTSP server affects popular applications, including VLC, MPlayer and others, Cisco Talos has discovered. Developed by Live Networks, Inc, LIVE555 Streaming Media…
Read MoreRecent Branch.io Patch Creates New XSS Flaw
The patch for a recently disclosed cross-site scripting (XSS) vulnerability in Branch.io introduced another similar flaw, a security researcher revealed last week. California-based Branch.io provides customers with solutions that help…
Read More