Hack Reports - Latest Cybersecurity News, Trends & Updates

Sign in Subscribe

Vulnerability Exploits

Microsoft January 2025 Patch Tuesday - 159 Vulnerabilities Fixed, Including 10 Critical RCE's - CybersecurityNews

Microsoft January 2025 Patch Tuesday - 159 Vulnerabilities Fixed, Including 10 Critical RCE's - CybersecurityNews

Microsoft January 2025 Patch Tuesday: Key Details and Vulnerabilities On January 14, 2025, Microsoft released its first security update of the year as part of the January 2025 Patch Tuesday, addressing a significant number of vulnerabilities across various Microsoft products. Number and Types of Vulnerabilities * The update fixes a total

Microsoft Patches Trio of Exploited Windows Hyper-V Zero-Days - SecurityWeek

Microsoft Patches Trio of Exploited Windows Hyper-V Zero-Days - SecurityWeek

Microsoft January 2025 Patch Tuesday: Hyper-V and Windows Zero-Day Exploits Hyper-V Vulnerabilities In the latest Microsoft Patch Tuesday for January 2025, several critical vulnerabilities affecting Microsoft Hyper-V have been addressed. Here are the key details: * CVE-2025-21333, CVE-2025-21334, CVE-2025-21335: These are elevation of privilege vulnerabilities in the Windows Hyper-V NT Kernel

Microsoft January 2025 Patch Tuesday fixes 8 zero-days, 159 flaws - BleepingComputer

Microsoft January 2025 Patch Tuesday fixes 8 zero-days, 159 flaws - BleepingComputer

Microsoft January 2025 Patch Tuesday: Vulnerabilities, Fixes, and Updates Microsoft's January 2025 Patch Tuesday has addressed a significant number of vulnerabilities and introduced several important updates for Windows operating systems. Here are the key details: Vulnerabilities Addressed * Total Vulnerabilities: Microsoft fixed 159 vulnerabilities, including 10 classified as critical

Researchers warn of ‘mass exploitation’ of Fortinet FortiGate zero-day - Cyber Daily

Researchers warn of ‘mass exploitation’ of Fortinet FortiGate zero-day - Cyber Daily

Latest News on Fortinet Zero-Day Vulnerability Exploitation and FortiGate Firewall Security Breach Overview of the Vulnerability A critical zero-day vulnerability in Fortinet's FortiOS and FortiProxy has been identified and is being actively exploited by unknown threat actors. Here are the key details: * Vulnerability Identifier: The vulnerability is tracked

Google OAuth flaw lets attackers gain access to abandoned accounts

Google OAuth flaw lets attackers gain access to abandoned accounts

Google OAuth Security Flaw: Abandoned Account Access Vulnerability A critical vulnerability in Google's "Sign in with Google" authentication flow, discovered and reported in late 2024, has significant implications for data security, particularly affecting former employees of failed startups. The Vulnerability: Domain Ownership and OAuth Interaction The

Google OAuth Vulnerability Exposes Millions via Failed Startup Domains

Google OAuth Vulnerability Exposes Millions via Failed Startup Domains

Google OAuth Vulnerability 2025: Domain Ownership and Data Breaches A critical vulnerability in Google's “Sign in with Google” authentication flow, utilizing OAuth, has been identified, posing significant risks to data security, particularly for individuals who have worked for startups that have failed. The Vulnerability: Domain Ownership Meets OAuth

Microsoft Uncovers macOS Vulnerability CVE-2024-44243 Allowing Rootkit Installation

Microsoft Uncovers macOS Vulnerability CVE-2024-44243 Allowing Rootkit Installation

macOS CVE-2024-44243 Vulnerability Analysis A recent discovery by Microsoft's Threat Intelligence team has highlighted a significant security vulnerability in macOS, identified as CVE-2024-44243. Here is a detailed analysis of this vulnerability and its implications for macOS security. Vulnerability Overview CVE-2024-44243 is a medium-severity vulnerability (CVSS score: 5.5)