Frank Crast

7-year old polkit vulnerability could allow hackers root shell on Linux systems

A security researcher has discovered a seven-year old polkit privileged escalation vulnerability CVE-2021-3560 that could allow a remote attacker root shell access on Linux systems.

7-year old polkit vulnerability could allow hackers root shell on Linux systems Read More »

Google fixes Chrome zero-day (CVE-2021-30551) exploited in the wild

Google has released Chrome 91 security update 91.0.4472.101 for Windows, Mac and Linux with fixes for multiple Critical or High severity vulnerabilities, one of those a zero-day vulnerability CVE-2021-30551 exploited in the wild.

Google fixes Chrome zero-day (CVE-2021-30551) exploited in the wild Read More »

SAP June 2021 Security Patch Day includes fix for Critical vulnerability in SAP NetWeaver AS ABAP and ABAP Platform

Software giant SAP has released June 2021 Security Patch Day that includes 20 separate security advisories and patches. One of the patches fixes a Critical vulnerability in SAP NetWeaver AS ABAP and ABAP Platform.

SAP June 2021 Security Patch Day includes fix for Critical vulnerability in SAP NetWeaver AS ABAP and ABAP Platform Read More »

Microsoft June 2021 Security Updates includes fixes for 6 zero-day vulnerabilities

Microsoft has released the June 2021 Security updates that includes patches for 50 vulnerabilities, 5 of those rated Critical. The updates also include fixes for 6 zero-day flaws exploited in the wild.

Microsoft June 2021 Security Updates includes fixes for 6 zero-day vulnerabilities Read More »

Adobe releases security updates for Adobe Acrobat and Reader, other products

Adobe has released security updates to address multiple vulnerabilities in Adobe Acrobat and Reader, Adobe Connect, Photoshop, Experience Manager, Creative Cloud Desktop Application, RoboHelp Server, Photoshop Elements, Premiere Elements, After Effects and Animate.

Adobe releases security updates for Adobe Acrobat and Reader, other products Read More »

CIS Controls Version 8

The Center of Internet Security (CIS) in coordination with the SANS Institute and through a consortium of security experts, U.S. agencies such as the NSA, coordinated the CIS Controls Version 8 (formerly known as “Critical Security Controls” or CSC) to help simplify and prioritize list of controls that would have the greatest impact to an organization in improving risk posture against cyber threats.

CIS Controls Version 8 Read More »