Third-Party Security - Securezoo Blog

Drupal patches 3rd-party library CKEditor vulnerabilities

Post author:Frank Crast
Post published:August 16, 2021
Post category:Security Updates & Patches Third-Party Security Vulnerabilities & Exploits

Drupal has patched Moderately Critical third-party library CKEditor vulnerabilities that affect multiple versions of Drupal Core.

Drupal patches Critical third-party library vulnerability (CVE-2021-32610)

Post author:Frank Crast
Post published:July 23, 2021
Post category:Security Updates & Patches Third-Party Security Vulnerabilities & Exploits

Drupal has patched a Critical third-party library vulnerability that affects multiple versions of Drupal Core. A remote attacker could exploit this vulnerability to compromise an affected system.

Attackers could have taken over an Atlassian account via one-click exploit

Post author:Frank Crast
Post published:June 24, 2021
Post category:Application Security Third-Party Security Vulnerabilities & Exploits

Cybersecurity researchers have discovered a series of chained Atlassian vulnerabilities that could have allowed an attacker to take over an Atlassian account connected via SSO and control Atlassian applications.

SDK supply chain vulnerability exposes security cameras to hacking

Post author:Frank Crast
Post published:June 16, 2021
Post category:Internet of Things (IoT)Security Updates & Patches Third-Party Security Vulnerabilities & Exploits

A vulnerability in ThroughTek’s Kalay Platform software development hit (SDK) has exposed many security cameras used by original equipment manufacturers (OEMs) of consumer-grade security cameras and IoT devices.

Drupal fixes ‘Moderately Critical’ XSS bug in CKEditor library

Post author:Frank Crast
Post published:May 28, 2021
Post category:Security Updates & Patches Third-Party Security Vulnerabilities & Exploits

Drupal has patched a Moderately Critical cross-site scripting (XSS) vulnerability in Drupal Core.

CHIRP tool scans for signs of APT compromise associated with SolarWinds and Azure/M365 cyberattacks

Post author:Frank Crast
Post published:March 19, 2021
Post category:Cybersecurity Attacks Security Monitoring System Hardening Third-Party Security

The DHS CISA cybersecurity team just released a new tool dubbed CHIRP, a forensics collection tool designed to help network defenders scan for indicators of compromise (IOCs) associated with the SolarWinds Orion and Active Directory/M365 compromise and cyberattacks.

Drupal patches Critical third-party library vulnerability (CVE-2020-36193)

Post author:Frank Crast
Post published:January 23, 2021
Post category:Application Security Security Updates & Patches Third-Party Security Vulnerabilities & Exploits

Drupal has patched a Critical third-party library vulnerability (CVE-2020-36193) that affects multiple versions of Drupal Core.

DHS issues new emergency guidance on SolarWinds Orion Code compromise

Post author:Frank Crast
Post published:December 30, 2020
Post category:Cybersecurity Articles Cybersecurity Attacks Data Breach Security Updates & Patches Third-Party Security

The Department of Homeland Security (DHS) has issued new emergency guidance on the SolarWinds Orion Code compromise and supply chain vulnerability.

Hackers target Vietnam in supply chain cyberattack

Post author:Frank Crast
Post published:December 29, 2020
Post category:Cybersecurity Attacks Malware Third-Party Security

Cybersecurity experts discovered a new supply chain attack against a certification authority organization in Vietnam.

DHS warns businesses of risks using Chinese tech and data services

Post author:Frank Crast
Post published:December 24, 2020
Post category:Cybersecurity Articles Data Breach Data Privacy Insider Threats Regulations & Laws Security Monitoring Third-Party Security

The United States Department of Homeland Security (DHS) has published a new advisory warning businesses of the risks using tech and data services linked to the People’s Republic of China (PRC).