Citrix patches privileged escalation vulnerability in Virtual Apps and Desktops
Citrix has patched a vulnerability (CVE-2021-22928) in Virtual Apps and Desktops that could result in privilege escalation on a Windows Virtual Delivery Agent (VDA).
Juniper patches multiple vulnerabilities in Junos OS and other products (July 2021)
Juniper Networks has released security advisories to fix many vulnerabilities on Junos OS, EX4300, PTX Series, QFX Series, SRX Series network devices and multiple other products.
Google fixes Chrome zero-day (CVE-2021-30563) exploited in the wild
Google has released Chrome 91 security update 91.0.4472.164 for Windows, Mac and Linux with fixes for multiple High severity vulnerabilities, one of those a zero-day vulnerability CVE-2021-30563 exploited in the wild.
VMware patches 2 High risk ESXi vulnerabilities
VMware has patched authentication and denial of service vulnerabilities (CVE-2021-21994, CVE-2021-21995) that impact VMware ESXi and Cloud Foundation products.
SAP July 2021 Security Patch Day addresses Critical vulnerabilities
Software giant SAP has released July 2021 Security Patch Day that includes 15 separate security advisories and patches.
Microsoft July 2021 Security Updates includes fixes for 13 Critical RCEs, 3 zero-day vulnerabilities
Microsoft has released the July 2021 Security updates that includes patches for 117 vulnerabilities, 13 of those rated Critical. The updates also include fixes for 3 zero-day bugs exploited in the wild.
Adobe releases security updates for Adobe Acrobat and Reader (APSB21-51), other products
Adobe has released security updates to address multiple vulnerabilities in Adobe Acrobat and Reader, Adobe Dimension, Illustrator, Framemaker and Bridge products.
Mozilla releases Firefox 90 with new version of SmartBlock and 9 security fixes
The Mozilla Foundation has released Firefox 90 that includes a new version of SmartBlock and security fixes for nine vulnerabilities, five rated High severity.
Kaseya VSA falls victim to massive sophisticated ransomware attack (update)
Kaseya VSA has fallen victim to a sophisticated and massive ransomware attack, that some experts say has affected thousands of customers. The company also provided a patch update for on-premise customers.
Critical ForgeRock Access Management vulnerability (CVE-2021-35464) exploited
A Critical ForgeRock Access Management (AM) vulnerability (CVE-2021-35464) has been exploited in the wild. The issue affects ForgeRock's OpenAM, open-source AM solution.