Frank Crast, Author at Securezoo

Apple fixes 2 zero-days (CVE-2022-32894 and CVE-2022-32893) in iOS 15.6.1 and macOS Monterey 12.5.1 (update now!)

Mobile Security, Security Updates & Patches, Vulnerabilities & Exploits, Zero-days / Frank Crast / August 19, 2022 / CVE-2022-32893, CVE-2022-32894, iOS, iOS15.6.1, macOS, macOS Monterey 12.5.1

Apple has released security updates for Apple iOS 15.6.1, iPadOS 15.6.1, macOS Monterey 12.5.1, and Safari 15.6.1. The updates include fixes for two zero-day vulnerabilities (CVE-2022-32894 and CVE-2022-32893) under attack in the wild.

Apple fixes 2 zero-days (CVE-2022-32894 and CVE-2022-32893) in iOS 15.6.1 and macOS Monterey 12.5.1 (update now!) Read More »

CISA adds 7 vulnerabilities to Known Exploited Vulnerabilities Catalog

Cybersecurity Attacks, Vulnerabilities & Exploits / Frank Crast / August 19, 2022 / Active Directory, Apple, CISA, CVE-2017-15944, CVE-2022-21971, CVE-2022-22536, CVE-2022-26923, CVE-2022-2856, CVE-2022-32893, CVE-2022-32894, iOS, Known Exploited Vulnerabilities Catalog, macOS, Microsoft, Windows

The Cybersecurity and Infrastructure Security Agency (CISA) has added seven vulnerabilities to its Known Exploited Vulnerabilities Catalog, to include Apple (2), Microsoft (2), SAP, Google Chrome, and Palo Alto Networks.

CISA adds 7 vulnerabilities to Known Exploited Vulnerabilities Catalog Read More »

Google releases Chrome 104 security update with fixes for 11 vulnerabilities (1 zero-day CVE-2022-2856)

Security Updates & Patches, Vulnerabilities & Exploits, Zero-days / Frank Crast / August 19, 2022 / Chrome, CVE-2022-2856, Vulnerabilities, Zero-day

Google has released Chrome 104.0.5112.101 (Mac/Linux) and 104.0.5112.102/101 (Windows), with fixes for 11 vulnerabilities (one rated Critical and seven rated High severity). Additionally, one of the patches fixed a zero-day flaw CVE-2022-2856.

Google releases Chrome 104 security update with fixes for 11 vulnerabilities (1 zero-day CVE-2022-2856) Read More »

Attackers exploit open redirect vulnerability on Amex and Snapchat sites

Cybersecurity Attacks, Phishing, Vulnerabilities & Exploits / Frank Crast / August 16, 2022 / Amex, Cybersecurity Threat Center, Docusign, FedEx, Google Workspace, INKY, Microsoft, Microsoft 365, phishing, redirect, Snapchat

Attackers have been exploiting a well-known open redirect vulnerability on American Express and Snapchat sites to phish for victim’s personal data.

Attackers exploit open redirect vulnerability on Amex and Snapchat sites Read More »

Zeppelin Ransomware threatens wide range of businesses and critical infrastructure organizations

Cybersecurity Attacks, Malware, Ransomware / Frank Crast / August 16, 2022 / #StopRansomware, CISA, FBI, Ransomware, Vega, Zeppelin

The Cybersecurity and Infrastructure Security Agency (CISA) and Federal Bureau of Investigation (FBI) have issued a joint cybersecurity advisory on Zeppelin Ransomware.

Zeppelin Ransomware threatens wide range of businesses and critical infrastructure organizations Read More »

Adobe security updates for Acrobat and Reader, Illustrator and other products

Security Updates & Patches, Vulnerabilities & Exploits / Frank Crast / August 11, 2022 / Acrobat, Adobe, Commerce, Framemaker, Illustrator, PremiereElements, Vulnerabilities

Adobe has released security updates for Acrobat and Reader, Illustrator, FrameMaker, Premiere Elements, and Adobe Commerce.

Adobe security updates for Acrobat and Reader, Illustrator and other products Read More »

Microsoft August 2022 Security Updates addresses 121 vulnerabilities (17 Critical and 1 zero-day)

Security Updates & Patches, Vulnerabilities & Exploits, Zero-days / Frank Crast / August 10, 2022 / CVE-2022-21980, CVE-2022-24477, CVE-2022-24516, CVE-2022-30133, CVE-2022-33646, CVE-2022-34691, CVE-2022-34696, CVE-2022-34702, CVE-2022-34713, CVE-2022-34714, CVE-2022-35744, CVE-2022-35745, CVE-2022-35752, CVE-2022-35753, CVE-2022-35766, CVE-2022-35767, CVE-2022-35794, CVE-2022-35804, Cybersecurity Threat Center, DogWalk, MSDT

The Microsoft August 2022 Security Updates includes patches and advisories for 121 vulnerabilities, 17 of those rated Critical severity and one zero-day CVE-2022-34713 exploited in the wild.

Microsoft August 2022 Security Updates addresses 121 vulnerabilities (17 Critical and 1 zero-day) Read More »

CISA adds Zimbra vulnerability (CVE-2022-27924) to Known Exploited Vulnerabilities Catalog

Security Updates & Patches, Vulnerabilities & Exploits / Frank Crast / August 7, 2022 / CVE-2022-27924, Zimbra

The Cybersecurity and Infrastructure Security Agency (CISA) has added one Zimbra vulnerability to its Known Exploited Vulnerabilities Catalog based on evidence that cyber criminals are actively exploiting the vulnerabilities.

CISA adds Zimbra vulnerability (CVE-2022-27924) to Known Exploited Vulnerabilities Catalog Read More »

Cisco releases Critical advisory for Small Business RV routers

Network Security, Security Updates & Patches, Vulnerabilities & Exploits / Frank Crast / August 7, 2022 / CVE-2022-20827, CVE-2022-20841, CVE-2022-20842, Router, Small Business, SMB, VPN, WAN

Cisco has released a Critical security update for three vulnerabilities in Small Business RV Routers. An unauthenticated, remote attacker could execute arbitrary code or cause a denial of service (DoS) condition on an unpatched device.

Cisco releases Critical advisory for Small Business RV routers Read More »

F5 fixes 12 High severity vulnerabilities in BIG-IP and BIG-IQ products

Security Updates & Patches, Vulnerabilities & Exploits / Frank Crast / August 7, 2022 / BIG-IP, BIG-IQ, CVE-2022-35243, CVE-2022-35728, F5, Networking

F5 has released fixes for 12 High severity vulnerabilities that affect BIG-IP and BIG-IQ products.

F5 fixes 12 High severity vulnerabilities in BIG-IP and BIG-IQ products Read More »