Hackers Earn $350k on Second Day at Pwn2Own Toronto 2023

October 26, 2023 at 12:57PM Hackers at the Pwn2Own Toronto 2023 competition earned a total of $350,000 in rewards on the second day. Devices such as NAS devices, printers, smart speakers, mobile phones, and routers were successfully exploited. The highest reward of $100,000 went to Chris Anastasio for vulnerabilities in the P-Link Omada Gigabit router … Read more

Critical SOCKS5 Vulnerability in cURL Puts Enterprise Systems at Risk

October 11, 2023 at 12:06PM Patches have been released for a critical memory corruption vulnerability in the cURL data transfer project. The flaw, tracked as CVE-2023-38545, affects the SOCKS5 proxy handshake process in cURL, allowing remote exploitation in certain configurations. The bug can lead to heap buffer overflow, and affected versions are 7.69.0 to 8.3.0. … Read more