Update: Thanks to others for pointing out it’s **more than just HP printers**. Heads up to those who deployed Microsoft’s most recent exploit...

PoC (DoS + scanner) for CVE-2020-0609 & CVE-2020-0610 - RD Gateway RCE - ollypwn/BlueGate

Google Groups allows you to create and participate in online forums and email-based groups with a rich experience for community conversations.

A speculative execution side channel variant known as L1D Eviction Sampling may allow the data value of some modified cache lines in the L1 data cache to be inferred under a specific set of complex conditions. L1D eviction sampling has been assigned CVE-2020-0549 with a CVSS of 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N.

On some processors under certain microarchitectural conditions, data from the most recently evicted modified L1 data cache (L1D) line may be propagated into an unused (invalid) L1D fill buffer. On processors affected by Microarchitectural Data Samping (MDS) or Transactional Asynchronous Abort (TAA), data from an L1D fill buffer may be inferred using one of these data sampling side channel methods. By combining these two behaviors together, it may be possible for a malicious actor to infer data values from modified cache lines that were previously evicted from the L1 data cache. This is called L1D eviction sampling.

Malicious software may be able to use L1D eviction sampling to infer…

Alexander Chailytko Cyber Security, Research & Innovation Manager In this publication we describe a technique which would have allowed a threat actor to potentially identify and join active meetings. All the details discussed in this publication were responsibly disclosed to Zoom Video Communications, Inc. In response, Zoom introduced a number of mitigations, so this attack... Click to Read More

We are here to kick off our first release of the decade, with Kali Linux 2020.1! Available for immediate download.

This document describes the security content of macOS Catalina 10.15.3, Security Update 2020-001 Mojave, Security Update 2020-001 High Sierra.

Dell Client XPS 13 2-in-1 (7390) BIOS requires an update to address a configuration vulnerability.

The Cisco Security portal provides actionable intelligence for security threats and vulnerabilities in Cisco products and services and third-party products.

Describes the latest microcode updates from Intel.

Windows 10 20H1, also known as version 2004, will introduce multiple new features and under the hood improvements to the operating system. Windows 10 version 2004 also includes a new Optional features settings page and two important tools—Paint and WordPad are now optional. In Windows 10 20H1, Microsoft is offering both Paint and WordPad as […]

add-on adds a button to your browser's toolbar area. To block a new site (restrict user access) just browse the URL once and press the toolbar button or open the extension's options page and add the hostname (like www.google.com, or *.google.com) in the textbox and press the 'add' button. This extension accepts master password to allow website access for a short period of time. If the master password is set, you can browse the restricted sites for a pre-defined time period. Also, this extension can be used to redirect a hostname with its arguments to a new destination instead of blocking a hostname (like redirect to a user-defined blocking page). This feature is useful for instance to redirect a search engine into another search engine.

OpenSK is an open-source implementation for security keys written in Rust that supports both FIDO U2F and FIDO2 standards. - google/OpenSK

Oh man where to even begin with this one. This was a crazy ride and I learned a ton along the way.