Apple iOS 12.2 Patches 51 Serious Flaws
Apple patched more than 50 flaws in iOS 12.2, including an array of bugs in Webkit and a vulnerability that allows apps to secretly listen to users.
Vulnerabilities
Bugs in Grandstream Gear Lay Open SMBs to Range of Attacks
Attackers can remotely compromise multiple network devices (IP PBX, conferencing gear and IP phones), installing malware and eavesdropping via video and audio functions.
Firefox and Edge Fall to Hackers on Day Two of Pwn2Own
Browsers Firefox and Edge take a beating on day two of the Pwn2Own competition.
Users of the open-source project should upgrade immediately.
The unpatched vulnerabilities exist in 20 products made by the popular Medtronics medical device manufacturer, including defibrillators and home patient monitoring systems.
The plugin, Social Warfare, is no longer listed after a cross site scripting flaw was found being exploited in the wild.
On the first day of Pwn2Own 2019 hackers poked holes in Apple Safari, VMware Workstation and Oracle VirtualBox.
The most serious vulnerabilities in Cisco’s 8800 Series IP Phones could allow unauthenticated, remote attackers to conduct a cross-site request forgery attack or write arbitrary files to the filesystem.
Experts from Gartner, Lookout and Google talk enterprise mobile security in this webinar replay.
