Firmware vulnerabilities in millions of computers could give hackers superuser status

Two years ago, ransomware crooks breached hardware-maker Gigabyte and dumped more than 112 gigabytes of data that included information from some of its most important supply-chain partners, including Intel and AMD. Now researchers are warning that the leaked information revealed ...

Microsoft takes pains to obscure role in 0-days that caused email breach

Getty Images | Aurich Lawson On Friday, Microsoft attempted to explain the cause of a breach that gave hackers working for the Chinese government access to the email accounts of 25 organizations—reportedly including the US Departments of State and Commerce ...

WordPress plugin installed on 1 million+ sites logged plaintext passwords

Getty Images All-In-One Security, a WordPress security plugin installed on more than 1 million websites, has issued a security update after being caught three weeks ago logging plaintext passwords and storing them in a database accessible to website admins. The ...

Hackers exploit gaping Windows loophole to give their malware kernel access

Getty Images Hackers are using open source software that’s popular with video game cheaters to allow their Windows-based malware to bypass restrictions Microsoft put in place to prevent such infections from occurring. The software comes in the form of two ...

MOVEit app mass-exploited last month patches new critical vulnerability

MOVEit, the file-transfer software exploited in recent weeks in one of the biggest cyberattacks ever, has received yet another security update that fixes a critical vulnerability that could be exploited to give hackers access to vast amounts of sensitive data. ...