Sophos Firewall RCE vulnerability (CVE-2022-3236) exploited the wild
Sophos has fixed a Sophos Firewall remote code execution (RCE) vulnerability (CVE-2022-3236) exploited in the wild.
Vulnerabilities & Exploits
ISC fixes High risk BIND vulnerabilities, BIND 9 Security Vulnerability Matrix
The Internet Systems Consortium (ISC) has released new security updates that fix four High risk vulnerabilities in multiple versions of BIND, as well as BIND 9 Security Vulnerability Matrix.
Mozilla releases Firefox 105 with fixes for 3 High severity vulnerabilities
The Mozilla Foundation has patched four High risk vulnerabilities in Firefox 105, as well as a number of other bug fixes.
Microsoft releases out-of-band patch for Endpoint Configuration Manager
Microsoft has released an out-of-band patch for a Endpoint Configuration Manager vulnerability CVE-2022-37972.
Adobe security updates for multiple products
Adobe has released security updates that address multiple vulnerabilities in Animate, Bridge, Experience Manager, Illustrator, InCopy, InDesign, and Photoshop.
Apple patches vulnerabilities in iOS 16, iOS 15.7, macOS Monterey 12.6, Big Sur 11.7 and other products
Apple has released security updates for Apple iOS 16, iOS 15.7, macOS Monterey 12.6, macOS Big Sur 11.7, Safari 15.6, and other products. Apple also warned two zero-day vulnerabilities may have been exploited in the wild.
Microsoft September 2022 Security Updates addresses 63 vulnerabilities (5 Critical, 1 zero-day, 1 Spectre-BHP)
The Microsoft September 2022 Security Updates includes patches and advisories for 63 vulnerabilities. Five of those are rated Critical severity, one that addresses a previously disclosed Spectre-BHP flaw, and a zero-day exploited in the wild.
Mirai variant MooBot botnet targets multiple D-Link flaws
Security researchers from Palo Alto Networks Unit 42 have discovered a Mirai botnet variant dubbed “MooBot” that targets multiple D-Link flaws and exposed networking devices running Linux.
CISA adds 12 vulnerabilities to Known Exploited Vulnerabilities Catalog
The Cybersecurity and Infrastructure Security Agency (CISA) has added 12 vulnerabilities to its Known Exploited Vulnerabilities Catalog, to include Apple, Chrome, Android OS, D-Link (5), QNAP NAS, MikroTik, Oracle WebLogic, FortiOS and FortiADC flaws.
Google fixes Chrome zero-day vulnerability (CVE-2022-3075) exploited in the wild
Google has released Chrome 105.0.5195.102 for Windows, Mac and Linux with a fix for a High severity zero-day vulnerability (CVE-2022-3075) exploited in the wild.