Get a Pentest and security assessment of your IT network.

Cyber Security

Dell SupportAssist Bug Exposes Business, Home PCs to Attacks

Dell published a security update to patch a SupportAssist Client software flaw which enables potential local attackers to execute arbitrary code with Administrator privileges on vulnerable computers. If exploited, this vulnerability allows attackers to load and execute malicious payloads within the context of the binaries on unpatched machines. The vulnerability is tracked as CVE-2020-5316 and comes with a high severity CVSSv3 base score of 7.8. A similar RCE flaw was found by security researcher Tom Forbes in the Dell System Detect software in 2015.

Source: https://www.bleepingcomputer.com/news/security/dell-supportassist-bug-exposes-business-home-pcs-to-attacks/

Related posts
Cyber Security

Ashley Madison 2.0 Hackers Leak 20GB Data Dump, Including CEO's Emails

Cyber Security

Art of Twitter account hacking

Cyber Security

Alexa Eavesdropping Flub Re-Sparks Voice Assistant Privacy Debate

Cyber Security

Dan Geer, Richard Thieme on specialization in security