Microsoft releases emergency patches for Exchange Server RCE vulnerabilities exploited in the wild (Updated)

Microsoft has released emergency out-of-band security updates to fix multiple Critical vulnerabilities impacting Microsoft Exchange Server 2013, 2016 and 2019. The tech giant also published interim mitigations if organizations can not patch immediately, as well as an IOC detection tool.

Continue ReadingMicrosoft releases emergency patches for Exchange Server RCE vulnerabilities exploited in the wild (Updated)

Adobe releases security updates for Adobe Acrobat and Reader, other products (CVE-2021-21017 exploited in wild)

Adobe has released security updates to address multiple vulnerabilities in Adobe Acrobat and Reader, as well as Magento, Photoshop, Animate, Illustrator and Dreamweaver. Moreover, the software giant addressed one Critical vulnerability CVE-2021-21017 exploited in the wild.

Continue ReadingAdobe releases security updates for Adobe Acrobat and Reader, other products (CVE-2021-21017 exploited in wild)

Apple releases iOS 14.4 with fixes for 3 zero-days exploited in wild (and other security updates)

Apple has released security updates to fix vulnerabilities in iOS 14.4, watchOS 7.3, Xcode 12.4, iCloud for Windows 12.0 and tvOS 14.4. As part of the updates, the tech giant also addressed three zero-day iOS vulnerabilities exploited in the wild.

Continue ReadingApple releases iOS 14.4 with fixes for 3 zero-days exploited in wild (and other security updates)