#code execution

AI agents that can write and execute code introduce significant security risks—from data exfiltration to resource abuse. Azure Container Apps Dynamic Sessions provides a solution: ephemeral, sandboxed execution environments that isolate agent-generated code from your production infrastructure. This comprehensive guide explores how to implement secure code execution for AI code interpreters,…

Attackers are leveraging a new infection technique called GrimResource that exploits MSC files. By crafting malicious MSC files, they can achieve full code execution within the context of mmc.exe (Microsoft Management Console) upon a user click.  It offers several advantages for attackers by bypassing the need for macros (disabled by default) and providing low-security warnings, making it ideal…

Best Visual Studio Code Extensions

FoxIt Patches Code Execution Flaws in PDF Tools

Home › Endpoint Security FoxIt Patches Code Execution Flaws in PDF Tools By Ryan Naraine on December 19, 2022 Tweet Foxit Software has rolled out a critical-severity patch to cover a dangerous remote code execution flaw in its flagship PDF Reader and PDF Editor products. The vulnerability, which was discovered and reported by researchers at the Renmin University of China, could be exploited via…

VMware Patches VM Escape Flaw Exploited at Geekpwn Event

Home › Cyberwarfare VMware Patches VM Escape Flaw Exploited at Geekpwn Event By Ryan Naraine on December 13, 2022 Tweet Virtualization technology giant VMware on Tuesday shipped urgent updates to fix a trio of security problems in multiple software products, including a virtual machine escape bug exploited at the GeekPwn 2022 hacking challenge. The VM escape flaw, documented as CVE-2022-31705,…

Cisco Working on Patch for Publicly Disclosed IP Phone Vulnerability

Home › Vulnerabilities Cisco Working on Patch for Publicly Disclosed IP Phone Vulnerability By Eduard Kovacs on December 09, 2022 Tweet Cisco informed customers on Thursday that it’s working on patches for a high-severity vulnerability affecting some of its IP phones. The flaw, tracked as CVE-2022-20968, impacts 7800 series and 8800 series (except 8821) Cisco IP phones. There are no workarounds,…

Several Code Execution Vulnerabilities Patched in Sophos Firewall

Home › Vulnerabilities Several Code Execution Vulnerabilities Patched in Sophos Firewall By Eduard Kovacs on December 06, 2022 Tweet Sophos has informed customers that Sophos Firewall version 19.5, whose general availability was announced in mid-November, patches several vulnerabilities, including ones that can lead to arbitrary code execution. In addition to resiliency improvements and a…

Nvidia Patches Many Vulnerabilities in Windows, Linux Display Drivers

Home › Vulnerabilities Nvidia Patches Many Vulnerabilities in Windows, Linux Display Drivers By Ionut Arghire on December 01, 2022 Tweet Nvidia’s November 2022 display driver updates patch 29 vulnerabilities impacting Windows and Linux products, including ten high-severity issues. The most severe of the security defects is CVE‑2022‑34669 (CVSS score of 8.8), an issue in the user mode layer of…