Frank Crast, Author at Securezoo

New Proof of Concept tool demos BrakTooth vulnerability exploits

Network Security, Vulnerabilities & Exploits / Frank Crast / November 8, 2021 / bluetooth, BrakTooth, GitHub, POC

Security researchers have released a new Proof of Concept (PoC) tool that demonstrates BrakTooth vulnerability exploits against Bluetooth-enabled devices.

New Proof of Concept tool demos BrakTooth vulnerability exploits Read More »

Mozilla releases Firefox 94 with fixes for 7 High severity vulnerabilities

Security Updates & Patches, Vulnerabilities & Exploits / Frank Crast / November 4, 2021 / CVE-2021-38503, CVE-2021-38504, CVE-2021-38505, CVE-2021-38506, CVE-2021-38507

The Mozilla Foundation has patched seven High risk vulnerabilities in Firefox 94, as well as added a security feature site isolation that guards against side-channel attacks.

Mozilla releases Firefox 94 with fixes for 7 High severity vulnerabilities Read More »

Shrootless vulnerability can bypass macOS System Integrity Protection

Security Updates & Patches, Vulnerabilities & Exploits / Frank Crast / November 4, 2021 / CVE-2021-30892, macOS, OS X, Shrootless, SIP

Security researchers from Microsoft have discovered a vulnerability dubbed “Shrootless” that can bypass macOS System Integrity Protection (SIP).

Shrootless vulnerability can bypass macOS System Integrity Protection Read More »

Google patches Android zero-day vulnerability exploited in the wild

Mobile Security, Security Updates & Patches, Vulnerabilities & Exploits, Zero-days / Frank Crast / November 3, 2021 / Android, CVE-2021-0889, CVE-2021-0918, CVE-2021-0930, CVE-2021-1048, CVE-2021-1924, CVE-2021-1975, Zero-day

Google has released the Android Security Bulletin for November 2021 with patches for 36 vulnerabilities, to include five High risk bugs and one zero-day being exploited in the wild.

Google patches Android zero-day vulnerability exploited in the wild Read More »

GoCD patches ‘Highly Critical’ authentication vulnerability

Application Security, Security Updates & Patches, Vulnerabilities & Exploits / Frank Crast / October 29, 2021 / CI/CD, CICD, developer, GoCD, SDLC, Software

GoCD has patched a Critical authentication vulnerability in its GoCD CI/CD tool.

GoCD patches ‘Highly Critical’ authentication vulnerability Read More »

BIND fixes lame cache vulnerability (CVE-2021-25219)

Security Updates & Patches, Vulnerabilities & Exploits / Frank Crast / October 29, 2021 / BIND, CVE-2021-25219, DNS, ISC

The Internet Systems Consortium (ISC) has released a security update that fixes a lame cache vulnerability in multiple versions of ISC Berkeley Internet Name Domain (BIND).

BIND fixes lame cache vulnerability (CVE-2021-25219) Read More »

Google releases Chrome 95 security update (95.0.4638.69) with fixes for 2 High risk zero-days exploited in the wild

Security Updates & Patches, Vulnerabilities & Exploits, Zero-days / Frank Crast / October 29, 2021 / Chrome, Chrome 95, CVE-2021-38000, CVE-2021-38003

Google has released Chrome 95 security update (95.0.4638.69) for Windows, Mac and Linux with fixes for multiple High risk vulnerabilities, 2 of those are being exploited in the wild.

Google releases Chrome 95 security update (95.0.4638.69) with fixes for 2 High risk zero-days exploited in the wild Read More »

Adobe security updates for Adobe Photoshop, Illustrator and 12 other products

Security Updates & Patches, Vulnerabilities & Exploits / Frank Crast / October 27, 2021 / Adobe, After Effects, Animate, Audition, Bridge, Illustrator, InDesign, Lightroom, Media Encoder, Photoshop, Prelude, XMP Toolkit

Adobe has released security updates for Adobe Photoshop, Illustrator and 12 other products.

Adobe security updates for Adobe Photoshop, Illustrator and 12 other products Read More »

Apples releases security updates for iOS 15.1, macOS Big Sur 11.6.1, and new macOS Monterey 12.0.1

Security Updates & Patches, Vulnerabilities & Exploits / Frank Crast / October 27, 2021 / Apple, Catalina, Control Center, iOS, iOS15, macOS, Monterey, Privacy, Shareplay

Apples has released security updates for iOS 15.1, macOS Big Sur 11.6.1, new macOS Monterey 12.0.1, and other Apple products.

Apples releases security updates for iOS 15.1, macOS Big Sur 11.6.1, and new macOS Monterey 12.0.1 Read More »

Embedded malware discovered in NPM package ua-parser-js

Application Security, Malware, Security Updates & Patches, Third-Party Security, Vulnerabilities & Exploits / Frank Crast / October 27, 2021 / JavaScript, malware, NPM, ua-parser-js, User-Agent

Embedded malware has been discovered in an NPM package ua-parser-js, a popular JavaScript library designed to detect browser, engine, OS, CPU, and device type/model from User-Agent data.

Embedded malware discovered in NPM package ua-parser-js Read More »