Vulnerabilities & Exploits

Securezoo Cybersecurity Threat Center blog posts of new vulnerabilities and exploits.

cyber security, internet, hacking-3400555.jpg

DevSecOps best practices to secure cloud-native and microservices-based applications

The National Institute of Standards and Technology (NIST) has issued the NIST SP 800-204C “Implementation of DevSecOps for a Microservices-based Application with Service Mesh.” The guidelines include many best practices on how organizations and secure their CI/CD pipeline and enhance the software delivery processes.

DevSecOps best practices to secure cloud-native and microservices-based applications Read More »

security, computer, protection-6901712.jpg

“Access:7” vulnerabilities in PTC Axeda agent and Axeda Desktop Server

Public reports of vulnerabilities named “Access:7” impact PTC Axeda agent and Axeda Desktop Server, remote asset connectivity software used as part of a cloud based Internet of Things (IoT) platform.

“Access:7” vulnerabilities in PTC Axeda agent and Axeda Desktop Server Read More »

Microsoft March 2022 Security Updates (fixes for 71 vulnerabilities, 3 Critical)

The Microsoft March 2022 Security Updates includes patches and advisories for 71 vulnerabilities, 29 of those remote code execution flaws and three rated Critical.

Microsoft March 2022 Security Updates (fixes for 71 vulnerabilities, 3 Critical) Read More »

CISA adds 11 vulnerabilities to Known Exploited Vulnerabilities Catalog (including recent Firefox zero-days)

The Cybersecurity and Infrastructure Security Agency (CISA) has added 11 vulnerabilities to its Known Exploited Vulnerabilities Catalog. Recent additions include two Firefox zero-days, VMware, Pulse Secure, Atlassian Jira Server, Netgear and Adobe product vulnerabilities.

CISA adds 11 vulnerabilities to Known Exploited Vulnerabilities Catalog (including recent Firefox zero-days) Read More »