Researchers found three vulnerabilities in Foscam connected security cameras that could enable a bad actor to gain root access knowing only the camera’s IP address.

Threatpost editors discuss the stories behind the biggest news that broke this week.

The payload is a commercial version of the Imminent Monitor tool, which is marketed as legitimate software.

An attacker can pick up the profile picture, username and the “likes” of unsuspecting visitors who find themselves landing on a malicious website.

Intel on Monday acknowledged that its processors are vulnerable to another Spectre-like speculative execution side channel flaw that could allow attackers to access information.

The vulnerability allows an attacker to execute a malware or other payloads on a client machine by sending malicious messages from the DHCP server.

Lenovo warns of a high-severity bug impacting its System x line of servers, along with a medium-severity buffer-overflow vulnerability affecting its popular ThinkPad line.

Intel may be facing as many as eight new Spectre-level vulnerabilities in its chips, a German magazine alleges.

A slew of products from medical dispensing company BD are susceptible to the KRACK vulnerability disclosed last fall.

A botnet has exploited a highly critical Drupal CMS vulnerability, which was previously disclosed by Drupal in March.