Vulnerabilities & Exploits

Securezoo Cybersecurity Threat Center blog posts of new vulnerabilities and exploits.

Google patches Chrome zero-day (CVE-2021-21166) exploited in the wild

Google has released a new Chrome 89 security update (89.0.4389.72) for Windows, Mac and Linux with fixes for multiple vulnerabilities, to include one zero-day vulnerability CVE-2021-21166 exploited in the wild.

Google patches Chrome zero-day (CVE-2021-21166) exploited in the wild Read More »

Cisco patches Critical vulnerabilities on NX-OS and ASE products

Cisco has patched multiple Critical vulnerabilities in NX-OS and Application Services Engine products. An attacker could remotely exploit some of these vulnerabilities to take control of an impacted system.

Cisco patches Critical vulnerabilities on NX-OS and ASE products Read More »

Firefox 86 adds ‘Total Cookie Protection’ along with fixes for 5 High risk vulnerabilities

The Mozilla Foundation has released Firefox 86 that includes a new feature for ‘Total Cookie Protection,’ along with security fixes for five High risk vulnerabilities.

Firefox 86 adds ‘Total Cookie Protection’ along with fixes for 5 High risk vulnerabilities Read More »

SonicWall releases new firmware updates for SMA 100 Series 10.X And 9.X products

SonicWall has released a new firmware update for SMA 100 Series 10.X And 9.X products. The latest update supersedes previous urgent patches that fixed a zero-day vulnerability CVE-2021-20016 earlier this month.

SonicWall releases new firmware updates for SMA 100 Series 10.X And 9.X products Read More »

Cyber attackers exploit Accellion FTA 0-day vulnerabilities to steal data

Cyber attackers have been exploiting Accellion File Transfer (FTA) appliance 0-day vulnerabilities to steal data and threaten their victims with extortion attempts.

Cyber attackers exploit Accellion FTA 0-day vulnerabilities to steal data Read More »

Cisco patches AnyConnect Secure Mobility Client DLL hijacking vulnerability (CVE-2021-1366)

Cisco has patched a Cisco AnyConnect Secure Mobility Client DLL hijacking vulnerability (CVE-2021-1366). An attacker could remotely exploit some of these vulnerabilities to take control of an impacted system.

Cisco patches AnyConnect Secure Mobility Client DLL hijacking vulnerability (CVE-2021-1366) Read More »

Android app SHAREit vulnerabilities could leak sensitive data and lead to remote code execution

Cybersecurity experts have discovered a popular Android app riddled with vulnerabilities has been download one billion times. An attacker can exploit the permissions on SHAREit mobile app to leak sensitive data and remotely execute malicious code.

Android app SHAREit vulnerabilities could leak sensitive data and lead to remote code execution Read More »

Microsoft February 2021 Security Updates, warns of Win32k Privilege Escalation vulnerability exploited in wild (updated)

Microsoft has released the February 2021 Security updates that includes patches for 56 vulnerabilities, 11 of those rated Critical. Moreover, the tech giant warned of a Win32k Privilege Escalation vulnerability CVE-2021-1732 exploited in wild.

Microsoft February 2021 Security Updates, warns of Win32k Privilege Escalation vulnerability exploited in wild (updated) Read More »