Microsoft has disabled Basic authentication in Exchange Online tenants to help fight against password spray attacks. Attackers are stepping up attacks in anticipation, Microsoft warns.
Google has released Chrome 106 (106.0.5249.91) for Windows, Mac and Linux, with fixes for three vulnerabilities (two rated High severity).
The Cybersecurity and Infrastructure Security Agency (CISA) has added 3 vulnerabilities to its Known Exploited Vulnerabilities Catalog, to include Microsoft Exchange and Atlassian flaws.
CISA adds 3 vulnerabilities to Known Exploited Vulnerabilities Catalog Read More »
Drupal has patched a Critical Twig third-party library vulnerability (CVE-2022-39261) that affect multiple versions of Drupal Core.
Drupal patches Critical Twig third-party library vulnerability (CVE-2022-39261) Read More »
Microsoft has released a new security update for two Microsoft Exchange Server zero-day vulnerabilities (CVE-2022-41040 and CVE-2022-41082) dubbed “ProxyNotShell” under limited targeted attacks in the wild.
Microsoft update for Microsoft Exchange Server zero-day ProxyNotShell vulnerabilities Read More »
Microsoft has been monitoring a threat actor deploying malicious OAuth apps on compromised cloud tenants to spread spam.
Threat actor deploys malicious OAuth apps on compromised cloud tenants to spread spam Read More »
Sophos has fixed a Sophos Firewall remote code execution (RCE) vulnerability (CVE-2022-3236) exploited in the wild.
Sophos Firewall RCE vulnerability (CVE-2022-3236) exploited the wild Read More »
The Internet Systems Consortium (ISC) has released new security updates that fix four High risk vulnerabilities in multiple versions of BIND, as well as BIND 9 Security Vulnerability Matrix.
ISC fixes High risk BIND vulnerabilities, BIND 9 Security Vulnerability Matrix Read More »
The Mozilla Foundation has patched four High risk vulnerabilities in Firefox 105, as well as a number of other bug fixes.
Mozilla releases Firefox 105 with fixes for 3 High severity vulnerabilities Read More »
Microsoft has released an out-of-band patch for a Endpoint Configuration Manager vulnerability CVE-2022-37972.
Microsoft releases out-of-band patch for Endpoint Configuration Manager Read More »
