Security Updates & Patches Archives - Page 39 of 89

APKPure Android store app infected with malware

Malware, Mobile Security, Security Updates & Patches / Frank Crast / April 10, 2021 / Android, APKPure, GMS, Google Play, HiddenAds, Kaspersky, LeifAccess, malware, mobile, SDK, SHAREit, Triada, Trojan

APKPure Android app store and mobile app has been infected with malicious software that downloads trojans to Android devices.

APKPure Android store app infected with malware Read More »

Cisco patches vulnerabilities in SD-WAN, Small Business routers and other products

Network Security, Security Updates & Patches, Vulnerabilities & Exploits / Frank Crast / April 8, 2021 / Cisco, CVE-2021-1137, CVE-2021-1480, malware, Routers, SD-WAN, Small Business

Cisco has patched multiple vulnerabilities in Cisco SD-WAN, Small Business routers, Unified Communications Products and Advanced Malware Protection. Two of those vulnerabilities (CVE-2021-1479, CVE-2021-1459) are rated Critical.

Cisco patches vulnerabilities in SD-WAN, Small Business routers and other products Read More »

Legacy QNAP NAS devices vulnerable to zero-day cyberattacks

Security Updates & Patches, Storage Security, Vulnerabilities & Exploits, Zero-days / Frank Crast / April 7, 2021 / CVE-2020-2509, CVE-2021-36195, QNAP, QSnatch, Threatpost, TS-231

Security researchers have warned legacy QNAP NAS devices are vulnerable to zero-day cyberattacks. Although QNAP patched two vulnerabilities in recent firmware updates, the company acknowledged patches were not yet available for certain legacy devices.

Legacy QNAP NAS devices vulnerable to zero-day cyberattacks Read More »

Threat actors target vulnerable critical SAP applications

Configuration Management, Cybersecurity Attacks, Security Updates & Patches, Vulnerabilities & Exploits / Frank Crast / April 6, 2021 / 10KBlaze, CISA, CVE-2020-6287, ERP, Onapsis, RECON, SAP

Security experts from Onapsis and SAP have released a new threat intel report for SAP customers that warns of cyber threat actors targeting unprotected SAP applications.

Threat actors target vulnerable critical SAP applications Read More »

FBI and CISA warn of Fortinet FortiOS vulnerability exploits

Security Updates & Patches, Vulnerabilities & Exploits / Frank Crast / April 2, 2021 / APT, CISA, CVE-2018-13379, CVE-2019-5591, CVE-2020-12812, FBI, Fortinet, FortiOS, Zerologon

Cybersecurity experts from the FBI and CISA have issued a joint cybersecurity advisory warning of APT exploits of Fortinet FortiOS vulnerabilities CVE-2018-13379, CVE-2019-5591 and CVE-2020-12812.

FBI and CISA warn of Fortinet FortiOS vulnerability exploits Read More »

Citrix fixes 3 Hypervisor vulnerabilities

Security Updates & Patches, Vulnerabilities & Exploits / Frank Crast / March 31, 2021 / Citrix, CVE-2020-35498, CVE-2021-28038, CVE-2021-28688, Hypervisor, LTSR

Citrix has released patches for Citrix Hypervisor that address two vulnerabilities. If exploited, an attacker could exploit privileged code in a guest VM and cause the host to crash or become unresponsive.

Citrix fixes 3 Hypervisor vulnerabilities Read More »

Google releases Chrome security update (89.0.4389.114)

Security Updates & Patches, Vulnerabilities & Exploits / Frank Crast / March 31, 2021 / Chrome, CVE-2021-21194, CVE-2021-21195, CVE-2021-21196, CVE-2021-21197, CVE-2021-21198, CVE-2021-21199

Google has released Chrome 89 security update (89.0.4389.114) for Windows, Mac and Linux with fixes for 8 vulnerabilities.

Google releases Chrome security update (89.0.4389.114) Read More »

VMware patches vRealize Operations vulnerabilities (CVE-2021-21975 and CVE-2021-21983)

Security Updates & Patches, Vulnerabilities & Exploits / Frank Crast / March 31, 2021 / API, CVE-2021-21975, CVE-2021-21983, VMware, vRealize

VMware issued a security advisory for two vulnerabilities (CVE-2021-21975 and CVE-2021-21983) that impact vRealize Operations products.

VMware patches vRealize Operations vulnerabilities (CVE-2021-21975 and CVE-2021-21983) Read More »

Samba fixes two High severity bugs (CVE-2020-27840 and CVE-2021-20277)

Messaging Security, Security Updates & Patches, Vulnerabilities & Exploits / Frank Crast / March 26, 2021 / Active Directory, CVE-2020-27840, CVE-2021-20277, LDAP, Samba, SMB, SMB/CIFS

Samba has released software updates to fix two High severity security vulnerabilities (CVE-2020-27840 and CVE-2021-20277) that impact Samba products. A remote attacker could take advantage of these bugs and exploit unpatched systems.

Samba fixes two High severity bugs (CVE-2020-27840 and CVE-2021-20277) Read More »

OpenSSL patches two High risk vulnerabilities (CVE-2021-3449 and CVE-2021-3450)

Security Updates & Patches, Vulnerabilities & Exploits / Frank Crast / March 26, 2021 / CVE-2021-3449, CVE-2021-3450, DOS, OpenSSL, TLS 1.2

OpenSSL has patched two High severity vulnerabilities CVE-2021-3449 and CVE-2021-3450 in certain OpenSSL versions. As a result, a bad actor could exploit and launch a Denial of Service attack against impacted systems.

OpenSSL patches two High risk vulnerabilities (CVE-2021-3449 and CVE-2021-3450) Read More »