Vulnerabilities & Exploits Archives - Page 28 of 106

Researchers discover Critical RCE 0-day “Log4Shell” vulnerability (CVE-2021-44228) in Apache Log4j logging utility (update)

Application Security, Security Updates & Patches, System Hardening, Third-Party Security, Vulnerabilities & Exploits / Frank Crast / December 15, 2021 / Apache, CVE-2021-44228, GitHub, LDAP, Log4j, log4Shell

Researchers have discovered a Critical 0-day vulnerability (CVE-2021-44228) in Apache Log4j logging utility that can result in remote code execution (RCE). In addition, CISA and Microsoft also issue new guidance for log4j vulnerability remediation.

Researchers discover Critical RCE 0-day “Log4Shell” vulnerability (CVE-2021-44228) in Apache Log4j logging utility (update) Read More »

Google releases Chrome 96 security update (96.0.4664.110) with fix for High risk zero-day exploited in the wild

Security Updates & Patches, Vulnerabilities & Exploits, Zero-days / Frank Crast / December 15, 2021 / Chrome, Chrome 96, CVE-2021-4098, CVE-2021-4102

Google has released Chrome 96 security update (96.0.4664.110) for Windows, Mac and Linux with a fix for one High risk vulnerability exploited in the wild.

Google releases Chrome 96 security update (96.0.4664.110) with fix for High risk zero-day exploited in the wild Read More »

Apple releases security updates for iOS 15.2, macOS Big Sur 11.6.2, macOS Monterey 12.1 and other products

Security Updates & Patches, Vulnerabilities & Exploits / Frank Crast / December 14, 2021 / BigSur, Catalina, iOS, iOS152, macOS, Monterey, Safari, tvOS, watchOS

Apple has released security updates for iOS 15.2, macOS Big Sur 11.6.2, macOS Monterey 12.1, and other Apple products.

Apple releases security updates for iOS 15.2, macOS Big Sur 11.6.2, macOS Monterey 12.1 and other products Read More »

SonicWall releases new firmware updates for SMA 100 Series remote access devices

Network Security, Security Updates & Patches, Vulnerabilities & Exploits / Frank Crast / December 9, 2021 / SMA 100, SonicWall

SonicWall has released new firmware updates for SMA 100 Series remote access devices with fixes for multiple High risk vulnerabilities.

SonicWall releases new firmware updates for SMA 100 Series remote access devices Read More »

Mozilla releases Firefox 95 with RLBox security technology and fixes for 6 High severity vulnerabilities

Security Updates & Patches, Vulnerabilities & Exploits / Frank Crast / December 9, 2021 / Firefox, Firefox 95, Mozilla, RLBox

The Mozilla Foundation has patched six High risk vulnerabilities in Firefox 95, as well as added a new security feature, RLBox, that hardens Firefox against third party library vulnerabilities.

Mozilla releases Firefox 95 with RLBox security technology and fixes for 6 High severity vulnerabilities Read More »

CISA and FBI alert: Attackers actively exploiting vulnerability in Zoho ManageEngine ServiceDesk Plus

Cybersecurity Attacks, Vulnerabilities & Exploits / Frank Crast / December 3, 2021 / APT, CISA, CVE-2021-44077, FBI, ServiceDesk, Zoho

The Cybersecurity and Infrastructure Security Agency (CISA) and Federal Bureau of Investigation (FBI) issued a joint advisory warning attackers are actively exploiting a vulnerability CVE-2021-44077 in Zoho ManageEngine ServiceDesk Plus.

CISA and FBI alert: Attackers actively exploiting vulnerability in Zoho ManageEngine ServiceDesk Plus Read More »

Mozilla patches Critical memory corruption vulnerability in NSS

Cryptography, Security Updates & Patches, Vulnerabilities & Exploits / Frank Crast / December 3, 2021 / CRL, Crypto, DER, DSA, Mozilla, NSS, OCSP, PKCS, RSA-PSS, TLS

The Mozilla Foundation has patched a memory corruption vulnerability CVE-2021-43527 in network security services (NSS) via DER-encoded DSA and RSA-PSS signatures.

Mozilla patches Critical memory corruption vulnerability in NSS Read More »

EwDoor Botnet attacking AT&T network edge devices

Cybersecurity Attacks, Network Security, Vulnerabilities & Exploits / Frank Crast / December 1, 2021 / AT&T, CVE-2017-6079, DDoS, Edge, EdgeMarc, EwDoor, malware, Network

An attacker has been targeting unpatched AT&T network edge devices via a brand new botnet dubbed EwDoor.

EwDoor Botnet attacking AT&T network edge devices Read More »

Windows Mobile Device Management 0-day vulnerability could lead to local privilege escalation

Security Updates & Patches, Vulnerabilities & Exploits, Zero-days / Frank Crast / November 30, 2021 / 0-day, CVE-2021-24084, HiveNightmare, mobile, SeriousSAM, Windows

A security researcher has discovered a zero-day vulnerability CVE-2021-24084 in Windows Mobile Device Management that could allow information disclosure and local privilege escalation (LPE).

Windows Mobile Device Management 0-day vulnerability could lead to local privilege escalation Read More »

VMware patches 2 vSphere Web Client vulnerabilities (CVE-2021-21980, CVE-2021-22049)

Security Updates & Patches, Vulnerabilities & Exploits / Frank Crast / November 27, 2021 / CVE-2021-22049, vcenter, VMware, vSphere

VMware has patched arbitrary file read and SSRF vCenter Server vulnerabilities (CVE-2021-21980, CVE-2021-22049) that affect VMware vSphere Web Client.

VMware patches 2 vSphere Web Client vulnerabilities (CVE-2021-21980, CVE-2021-22049) Read More »