Netgear Won’t Patch 45 Router Models Vulnerable to Serious Flaw
Almost two months after a high-severity flaw was disclosed – and seven months after it was first reported – Netgear has yet to issue fixes for 45 of its router models.
Vulnerabilities
4 Unpatched Bugs Plague Grandstream ATAs for VoIP Users
The flaws have been confirmed by Grandstream, but no firmware update has yet been issued.
Authorities Arrest Alleged 17-Year-Old ‘Mastermind’ Behind Twitter Hack
Three have been charged in alleged connection with the recent high-profile Twitter hack – including a 17-year-old teen from Florida who is the reported “mastermind” behind the attack.
Zoom has fixed the issue, which stemmed from a lack of checks against incorrect passcode attempts.
The flaw could allow a remote, unauthenticated attacker to bypass authentication on vulnerable devices.
Adobe has released patches for critical and important-severity flaws in its popular Magento e-commerce platform.
The “BootHole” bug could allow cyberattackers to load malware, steal information and move laterally into corporate, OT, IoT and home networks.
Gear from Secomea, Moxa and HMS Networks are affected by remote code-execution flaws, researchers warn.
WordPress plugin Comments – wpDiscuz, which is installed on over 70,000 sites, has issued a patch.
Attackers could have exploited various flaws in OkCupid’s mobile app and webpage to steal victims’ sensitive data and even send messages out from their profiles.
