January 2021

High risk vulnerability in Zyxel firewalls and AP controllers exploited in the wild

Security experts have warned about a high risk hardcoded credential vulnerability in Zyxel firewalls and AP controllers. Some sources have confirmed that bad actors have already ramped up exploits against the vulnerability.

High risk vulnerability in Zyxel firewalls and AP controllers exploited in the wild Read More »

NSA: New guidance to eliminate obsolete TLS protocols

The National Security Agency (NSA) has issued new guidance to eliminate obsolete Transport Layer Security (TLS) protocol configurations (such as TLS 1.0, TLS 1.1, SSLv2, SSLv3 and weak ciphers).

NSA: New guidance to eliminate obsolete TLS protocols Read More »

Mozilla releases Firefox 84.0.2, fix for critical vulnerability (CVE-2020-16044)

The Mozilla Foundation has released Firefox 84.0.2 that includes a security fix for a Critical vulnerability CVE-2020-16044. An attacker could exploit the vulnerability to take control of impacted systems. As part of Mozilla Foundation Security Advisory 2021-01, Firefox 84.0.2 patched a Critical ‘Use-after-free write’ vulnerability CVE-2020-16044. According to Mozilla, “a malicious peer could have modified a COOKIE-ECHO chunk

Mozilla releases Firefox 84.0.2, fix for critical vulnerability (CVE-2020-16044) Read More »

Google releases Chrome security update (87.0.4280.141)

Google has released Chrome 87 security update (87.0.4280.141) for Windows, Mac and Linux with fixes for 16 vulnerabilities. The tech giant also released a Chrome browser update for Android.

Google releases Chrome security update (87.0.4280.141) Read More »