Vulnerabilities & Exploits Archives - Page 6 of 106

Microsoft December 2022 Security Updates addresses 53 vulnerabilities (7 Critical, 1 exploited in the wild)

Security Updates & Patches, Vulnerabilities & Exploits, Zero-days / Frank Crast / December 17, 2022 / CVE-2022-41076, CVE-2022-41089, CVE-2022-41127, CVE-2022-44670, CVE-2022-44676, CVE-2022-44690, CVE-2022-44693, CVE-2022-44698, MOTW, PowerSHell, SmartScreen

The Microsoft December 2022 Security Updates includes patches and advisories for 53 vulnerabilities, including seven Critical severity issues and one exploited in the wild.

Microsoft December 2022 Security Updates addresses 53 vulnerabilities (7 Critical, 1 exploited in the wild) Read More »

Zerobot botnet exploits 21 vulnerabilities to breach targets

Cybersecurity Attacks, Malware, Vulnerabilities & Exploits / Frank Crast / December 11, 2022 / CVE-2022-01388, CVE-2022-22965, Fortinet, Spring4Shell, WebSocket, Zerobot

Security researchers have spotted a unique botnet dubbed Zerobot exploiting 21 IoT, network and other vulnerabilities, such as F5 BIG-IP, D-Link, Zyxel, Spring4Shell and other flaws.

Zerobot botnet exploits 21 vulnerabilities to breach targets Read More »

Android Security Bulletin December 2022 fixes 80 vulnerabilities (4 Critical)

Mobile Security, Security Updates & Patches, Vulnerabilities & Exploits / Frank Crast / December 7, 2022 / Android, CVE-2022-20411, CVE-2022-20472, CVE-2022-20473, CVE-2022-20498

Google has released its Android Security Bulletin for December 2022 with details of security vulnerabilities (four rated Critical severity) affecting Android devices.

Android Security Bulletin December 2022 fixes 80 vulnerabilities (4 Critical) Read More »

Rackspace suffers from security incident involving Hosted Exchange services

Cybersecurity Attacks, Data Breach, Messaging Security, Vulnerabilities & Exploits / Frank Crast / December 4, 2022 / Exchange, Microsoft, Office365, ProxyNotShell, Rackspace, Zeroday

Cloud computing services company Rackspace has reported a security incident involving Hosted Exchange services.

Rackspace suffers from security incident involving Hosted Exchange services Read More »

Google fixes Chrome 108 zero-day vulnerability (CVE-2022-4262) exploited in the wild

Security Updates & Patches, Vulnerabilities & Exploits, Zero-days / Frank Crast / December 4, 2022 / Chrome, CVE-2022-4262, Zero-day

Google has released Chrome 108.0.5359.94 for Mac and Linux and 108.0.5359.94/.95 for Windows with a fix for a High severity zero-day vulnerability (CVE-2022-4262) exploited in the wild.

Google fixes Chrome 108 zero-day vulnerability (CVE-2022-4262) exploited in the wild Read More »

Cuba ransomware attacks on the rise with new exploits

Cybersecurity Articles, Malware, Ransomware, Vulnerabilities & Exploits / Frank Crast / December 4, 2022 / C2, CISA, Cuba, CVE-2020-1472, CVE-2022-24521, FBI, H0lyGh0st, KerberCache, Kerberoasting, LockBit, malware, Ransomware, RomCom, Spy Marketplace, Zeppelin

The Federal Bureau of Investigation (FBI) and the Cybersecurity and Infrastructure Security Agency (CISA) have released a joint Cybersecurity Advisory (CSA) with new details regarding Cuba Ransomware attacks.

Cuba ransomware attacks on the rise with new exploits Read More »

Mozilla releases Firefox 107 with fixes for 8 High severity vulnerabilities

Security Updates & Patches, Vulnerabilities & Exploits / Frank Crast / November 20, 2022 / CVE-2022-45403, CVE-2022-45404, CVE-2022-45405, CVE-2022-45406, CVE-2022-45407, CVE-2022-45408, CVE-2022-45409, CVE-2022-45421, Firefox 107, Mozilla

The Mozilla Foundation has patched eight High risk vulnerabilities in Firefox 107, as well as a number of other bug fixes.

Mozilla releases Firefox 107 with fixes for 8 High severity vulnerabilities Read More »

ProxyNotShell POC exploit code released

Security Updates & Patches, Vulnerabilities & Exploits / Frank Crast / November 20, 2022 / CVE-2021-34473, CVE-2022-41040, CVE-2022-41082, Exploit, POC, ProxyNotShell, ProxyShell

A security researcher has released proof-of-concept (PoC) exploit code for Microsoft Exchange ProxyNotShell vulnerabilities (CVE-2022-41040 and CVE-2022-41082).

ProxyNotShell POC exploit code released Read More »

CISA adds 7 vulnerabilities to Known Exploited Vulnerabilities Catalog (to include Windows and Samsung vulnerabilities)

Mobile Security, Security Updates & Patches, Vulnerabilities & Exploits / Frank Crast / November 12, 2022 / CVE-2021-25337, CVE-2021-25369, CVE-2021-25370, CVE-2022-41073, CVE-2022-41091, CVE-2022-41125, CVE-2022-41128, Samsung, Windows

The Cybersecurity and Infrastructure Security Agency (CISA) has added seven (7) vulnerabilities to its Known Exploited Vulnerabilities Catalog, to include Microsoft Windows and Samsung vulnerabilities.

CISA adds 7 vulnerabilities to Known Exploited Vulnerabilities Catalog (to include Windows and Samsung vulnerabilities) Read More »

Cyber threat actors exploit Zimbra Collaboration Suite vulnerabilities (update)

Cybersecurity Attacks, Messaging Security, Vulnerabilities & Exploits / Frank Crast / November 12, 2022 / CVE-2022-24682, CVE-2022-27924, CVE-2022-27925, CVE-2022-30333, CVE-2022-37042, Exploit, Vulnerabilities, ZCS, Zimbra, Zimbra Collaboration Suite

The Cybersecurity and Infrastructure Security Agency (CISA) and the Multi-State Information Sharing & Analysis Center (MS-ISAC) have published a joint security alert for multiple vulnerabilities against Zimbra Collaboration Suite (ZCS).

Cyber threat actors exploit Zimbra Collaboration Suite vulnerabilities (update) Read More »