Browsing Tag
zero-day
24 posts
Weekly Top Ten Cybersecurity Stories – 5.19.2023
Apple fixes zero-days exploited on iPhone and Mac, ASUS routers taken offline by bad update, Sidewinder group infrastructure uncovered, and 7 more cybersecurity stories...
Weekly Top Ten Cybersecurity Stories – 5.12.2023
Hunting Russian intelligence "Snake" malware, Microsoft Secure Boot zero-day fix, zero-click Windows vulnerability, and 7 more...
Weekly Top Ten Cybersecurity Stories – 4.28.2023
Critical vulnerabilities in PaperCut print management software, Cisco XSS zero-day in server management tool, new Apache Superset vulnerability, and 7 more stories...
Weekly Top Ten Cybersecurity Stories – 4.21.2023
Fortra shares findings on GoAnywhere MFT zero-day attacks, Google Chrome hit by another zero-day attack, Docker privilege escalation vulnerability, and 7 more...
Weekly Top Ten Cybersecurity Stories – 4.14.2023
Microsoft Patch Tuesday rolls out fixes for 97 flaws, Nokoyawa ransomware attacks with Windows Zero-Day, detecting BlackLotus, and 7 more stories in cybersecurity!
Weekly Top Ten Cybersecurity Stories – 3.17.2023
Microsoft fixes two zero-days actively exploited by state-sponsored threat actors, Adobe Coldfusion vulnerability exploited in the wild, U.S. federal agency breached using 3-year-old vulnerability, and 8 more stories...
March 2023 Patch Tuesday Closes Two Zero-Days Actively Exploited By State-Sponsored Actors
Microsoft's Patch Tuesday for March 2023 fixes more than 80 vulnerabilities, 9 of which are rated critical severity, and 2 zero-days—an Outlook Elevation of Privilege Vulnerability (CVE-2023-23397) and a Windows SmartScreen Security Feature Bypass Vulnerability (CVE-2023-24880).
Administrators are encouraged to apply updates ASAP. If this is not possible, there are some mitigating actions to be taken.
Weekly Top Ten Cybersecurity Stories – 9.30.2022
Microsoft Exchange Zero-Day CVE-2022-41040 and CVE-2022-41082, Malicious vSphere Installers, Okta subsidiary discloses code repo breach, Powerpoint phishing to deploy Graphite Malware
Weekly Top Ten Cybersecurity Stories – 6.24.2022
Old Apple Safari vulnerability actively exploited, Cisco Routers patching end-of-life, MEGA cloud storage credential theft, Azure AFD phishing attacks
Weekly Top Ten Cybersecurity Stories – 6.17.2022
Atlassian vulns deploy ransomware, HelloXD ransomware, JFrog RCE, Fatal flaw in Office365, Follina patch released