Microsoft June 2019 Security Updates
Microsoft issued the June 2019 Security Updates that include 88 unique vulnerability fixes, 21 rated critical. Additional guidance was also published to mitigate Adobe vulnerabilities.
Oracle WebLogic Server vulnerability exploited to install cryptocurrency miner
Researchers at Trend Micro said bad actors are exploiting an Oracle WebLogic Server deserialization vulnerability CVE-2019-2725 to install a Monero cryptocurrency miner. Oracle patched the remote code execution vulnerability CVE-2019-2725…
Critical Exim vulnerability discovered and patched (update)
Researchers at Qualys discovered a critical remote command execution vulnerability in Exim, a popular mail transfer agent (MTA) used on mostly Unix-like operating systems.
Malware spam campaign targets Office vulnerability (CVE-2017-11882)
Microsoft is warning about a malware spam campaign targeting an Office vulnerability patched in 2017.
GoldBrute botnet targets 1.5M exposed RDP servers
A new botnet dubbed "GoldBrute" targets 1.5 million publicly exposed RDP servers on the internet via brute force attack.
VMware patches vulnerabilities in Tools and Workstation
VMware has released security updates (VMSA-2019-0009) to address vulnerabilities in VMware Tools and Workstation products.
Chrome 75 security updates
Google has released Chrome 75 (version 75.0.3770.80) for Windows, Mac and Linux. The company also published details for its Chrome 75 update for Android as well.
Apple updates AirPort Base Station Firmware
Apple has released AirPort Base Station Firmware Update 7.91 to address multiple vulnerabilities in AirPort Extreme and AirPort Time Capsule base station routers.
Siemens medical products impacted by BlueKeep RDS flaw
Siemens Healthineers, a Siemens company that makes medical products, has disclosed multiple software products are impacted by the Remote Desktop Services (RDS) or BlueKeep vulnerability.
BlueKeep scanning activity picks up
Security experts have been warning about bad actors soon developing exploits for a BlueKeep vulnerability that was patched by Microsoft earlier this month. Exploits in the wild are likely closer than ever after one security company spotted a huge uptick in scanning for BlueKeep over the weekend.