Securezoo Blog - Cyber Security Threat Center - the best source for latest cyber threats, vulnerabilities, data breaches and security updates.

Apple fixes zero-day vulnerability (CVE-2021-30807) in macOS Big Sur and iOS

Post author:Frank Crast
Post published:July 27, 2021
Post category:Security Updates & Patches Vulnerabilities & Exploits Zero-days

Apple has fixed a zero-day vulnerability CVE-2021-30807 in macOS Big Sur and iOS versions that is under active attack.

Microsoft issues workaround for zero-day ‘SeriousSAM’ vulnerability

Post author:Frank Crast
Post published:July 26, 2021
Post category:Security Updates & Patches Vulnerabilities & Exploits Zero-days

Microsoft has issued a workaround for a serious zero-day vulnerability CVE-2021–36934 dubbed "SeriousSAM" that could allow an attacker to read any registry hives as a non-administrator.

Adobe fixes vulnerabilities in multiple products

Post author:Frank Crast
Post published:July 23, 2021
Post category:Security Updates & Patches Vulnerabilities & Exploits

Adobe has released security updates to address multiple vulnerabilities in Adobe Photoshop, Audition, Character Animator, Prelude, Premiere Pro, After Effects, and Media Encoder.

Drupal patches Critical third-party library vulnerability (CVE-2021-32610)

Post author:Frank Crast
Post published:July 23, 2021
Post category:Security Updates & Patches Third-Party Security Vulnerabilities & Exploits

Drupal has patched a Critical third-party library vulnerability that affects multiple versions of Drupal Core. A remote attacker could exploit this vulnerability to compromise an affected system.

Apple security updates for iOS 14.7, macOS Big Sur 11.5 and other products

Post author:Frank Crast
Post published:July 22, 2021
Post category:Security Updates & Patches Vulnerabilities & Exploits

Apple has released security updates to fix vulnerabilities in iOS 14.7, macOS Big Sur 11.5, Safari 14.1.2, tvOS 14.7, watchOS 7.6, and other products.

16-year-old printer driver vulnerability affects millions of printers worldwide

Post author:Frank Crast
Post published:July 21, 2021
Post category:Security Updates & Patches Vulnerabilities & Exploits

Researchers have discovered a 16-year-old printer driver vulnerability CVE-2021-3438 that affects millions of printers worldwide, to include HP, Samsung and Xerox printer models.

Google releases Chrome security update (92.0.4515.107) with fixes for 35 vulnerabilities

Post author:Frank Crast
Post published:July 20, 2021
Post category:Security Updates & Patches Vulnerabilities & Exploits

Google has released Chrome 92 security update (92.0.4515.107) for Windows, Mac and Linux with fixes for 35 vulnerabilities.

U.S. government releases advisories and indictments related to “sophisticated Chinese state-sponsored activity”

Post author:Frank Crast
Post published:July 20, 2021
Post category:Cybersecurity Attacks Vulnerabilities & Exploits

The Cybersecurity and Infrastructure Security Agency (CISA), the Federal Bureau of Investigation (FBI), and the National Security Agency (NSA) have observed "sophisticated Chinese state-sponsored activity" targeting multiple public and private sectors in the United States.

Fortinet patches High risk RCE vulnerability (CVE-2021-32589) in FortiManager and FortiAnalyzer

Post author:Frank Crast
Post published:July 20, 2021
Post category:Network Security Security Updates & Patches Vulnerabilities & Exploits

Fortinet has patched a High risk use-after-free vulnerability (CVE-2021-32589) in FortiManager and FortiAnalyzer fgfmsd daemon. An attacker could exploit the vulnerability to launch remote code execution (RCE) as root and take control of an impacted system.

Critical WooCommerce SQL-injection vulnerability patched

Post author:Frank Crast
Post published:July 17, 2021
Post category:Security Updates & Patches Vulnerabilities & Exploits

A researcher has discovered a Critical SQL-injection vulnerability in WooCommerce, an open-source e-commerce plugin for WordPress. WooCommerce promptly provided an emergency patch for the plugin to fix the issue.