Hundreds of million users may have been exposed to cross-site scripting (XSS) attacks due to vulnerabilities in the Branch.io services used by Tinder, Shopify, Yelp…

Recently, 360 Security Center monitored that an attacker used the CVE-2018-8373 vulnerability to implement a drive-by download attack to spread remote control Trojans and password…

Background On 20th September 2018, the Zero Day Initiative (ZDI) team has publicly disclosed a serious remote code execution vulnerability in the Microsoft JET database…

Microsoft released the September patch yesterday, fixing 61 vulnerabilities. Among these, 17 were identified as critical vulnerabilities, 43 were critical vulnerabilities, and 1 was a…

Introduction On June 1, 2018, the 360 Advanced Threat Response Team discovered an in-the-wild flash zero-day vulnerability. Last week, Unit 42 published more details about…