Zero-day Archives - Page 2 of 5

Mozilla patches 2 Critical Firefox zero-day security flaws under attack in the wild

Security Updates & Patches, Vulnerabilities & Exploits, Zero-days / Frank Crast / March 8, 2022 / CVE-2022-26485, CVE-2022-26486, Firefox, Firefox97, Mozilla, Zero-day

The Mozilla Foundation has patched two Critical zero-day vulnerabilities in Firefox 97.0.2, Firefox ESR 91.6.1, Firefox for Android 97.3.0, and Focus 97.3.0. There are also reported attacks in the wild against each of these flaws.

Mozilla patches 2 Critical Firefox zero-day security flaws under attack in the wild Read More »

Google releases Chrome 98 security update with fix for zero-day vulnerability (CVE-2022-0609) exploited in the wild

Security Updates & Patches, Vulnerabilities & Exploits, Zero-days / Frank Crast / February 16, 2022 / Chrome, CVE-2022-0603, CVE-2022-0604, CVE-2022-0605, CVE-2022-0606, CVE-2022-0607, CVE-2022-0608, CVE-2022-0609, Zero-day

Google has released Chrome 98.0.4758.102 for Windows, Mac and Linux with fixes for multiple vulnerabilities, to include one zero-day (CVE-2022-0609) exploited in the wild.

Google releases Chrome 98 security update with fix for zero-day vulnerability (CVE-2022-0609) exploited in the wild Read More »

Google patches Android zero-day vulnerability exploited in the wild

Mobile Security, Security Updates & Patches, Vulnerabilities & Exploits, Zero-days / Frank Crast / November 3, 2021 / Android, CVE-2021-0889, CVE-2021-0918, CVE-2021-0930, CVE-2021-1048, CVE-2021-1924, CVE-2021-1975, Zero-day

Google has released the Android Security Bulletin for November 2021 with patches for 36 vulnerabilities, to include five High risk bugs and one zero-day being exploited in the wild.

Google patches Android zero-day vulnerability exploited in the wild Read More »

Apple releases iOS 15.0.2 with fix for zero-day exploited in the wild

Security Updates & Patches, Vulnerabilities & Exploits, Zero-days / Frank Crast / October 12, 2021 / CVE-2021-30883, iOS, iOS15, iPadOS, Zero-day

Apple has released a security update for iOS 15.0.2 with fix for zero-day exploited in the wild.

Apple releases iOS 15.0.2 with fix for zero-day exploited in the wild Read More »

Google Chrome 94 security update fixes zero-day vulnerability (CVE-2021-37973) under attack

Security Updates & Patches, Vulnerabilities & Exploits, Zero-days / Frank Crast / September 24, 2021 / Chrome 94, CVE-2021-37973, TAG, Zero-day

Google has released Chrome 94 security update (94.0.4606.61) with a fix for one zero-day vulnerability CVE-2021-37973 under attack.

Google Chrome 94 security update fixes zero-day vulnerability (CVE-2021-37973) under attack Read More »

Google fixes Chrome zero-day (CVE-2021-30551) exploited in the wild

Security Updates & Patches, Vulnerabilities & Exploits, Zero-days / Frank Crast / June 10, 2021 / browser, Chrome, CVE-2021-30551, Exploit, Zero-day

Google has released Chrome 91 security update 91.0.4472.101 for Windows, Mac and Linux with fixes for multiple Critical or High severity vulnerabilities, one of those a zero-day vulnerability CVE-2021-30551 exploited in the wild.

Google fixes Chrome zero-day (CVE-2021-30551) exploited in the wild Read More »

Chrome security update fixes zero-day (CVE-2021-21224) and 6 other vulnerabilities

Security Updates & Patches, Vulnerabilities & Exploits, Zero-days / Frank Crast / April 21, 2021 / Chrome, CVE-2021-21224, Google, Zero-day

Google has released Chrome 90 security update 90.0.4430.85 for Windows, Mac and Linux with a fix one vulnerability CVE-2021-21224 exploited in the wild and patches for six other vulnerabilities.

Chrome security update fixes zero-day (CVE-2021-21224) and 6 other vulnerabilities Read More »

Energy giant Shell latest victim in Accellion FTA cyberattacks

Cybersecurity Attacks, Data Breach, Security Updates & Patches, Vulnerabilities & Exploits, Zero-days / Frank Crast / March 24, 2021 / Accellion, CVE-2021-27101, CVE-2021-27102, CVE-2021-27103, CVE-2021-27104, Cyberattack, EOL, FireEye, FTA, Mandiant, Zero-day

Energy giant Shell was the latest victim in a series of cyberattacks on customers of Accellion’s legacy File Transfer Appliance (FTA) product used to transfer large files.

Energy giant Shell latest victim in Accellion FTA cyberattacks Read More »

Cybersecurity experts warn exploits grow ten-fold after Exchange Server zero-day vulnerabilities revealed

Security Updates & Patches, Vulnerabilities & Exploits / Frank Crast / March 15, 2021 / CVE-2021-26855, CVE-2021-26857, CVE-2021-26858, CVE-2021-27065, Exchange, IIS, Microsoft, Zero-day

Cybersecurity experts are warning exploits against organizations worldwide have grown ten-fold after recent Microsoft Exchange Server zero-day vulnerabilities known as “ProxyLogon” were revealed.

Cybersecurity experts warn exploits grow ten-fold after Exchange Server zero-day vulnerabilities revealed Read More »

FBI and CISA issue urgent joint cybersecurity advisory on Exchange server hacks

Messaging Security, Security Updates & Patches, Vulnerabilities & Exploits, Zero-days / Frank Crast / March 11, 2021 / CISA, CVE-2021-26855, CVE-2021-26857, CVE-2021-26858, CVE-2021-27065, Exchange, FBI, Zero-day

The Federal Bureau of Investigation (FBI) and the Cybersecurity and Infrastructure Security Agency (CISA) have issued an urgent joint cybersecurity advisory on the Microsoft Exchange vulnerability exploits, collectively known as “ProxyLogon.”

FBI and CISA issue urgent joint cybersecurity advisory on Exchange server hacks Read More »