Android Security Bulletin for October 2022
Google has released its Android Security Bulletin for October 2022 with details of security vulnerabilities affecting Android devices.
Security Updates & Patches
Securezoo Cybersecurity Threat Center blog posts of new security updates and patches.
Google releases Chrome 106 security update with fixes for 2 High severity vulnerabilities
Google has released Chrome 106 (106.0.5249.91) for Windows, Mac and Linux, with fixes for three vulnerabilities (two rated High severity).
CISA adds 3 vulnerabilities to Known Exploited Vulnerabilities Catalog
The Cybersecurity and Infrastructure Security Agency (CISA) has added 3 vulnerabilities to its Known Exploited Vulnerabilities Catalog, to include Microsoft Exchange and Atlassian flaws.
Drupal patches Critical Twig third-party library vulnerability (CVE-2022-39261)
Drupal has patched a Critical Twig third-party library vulnerability (CVE-2022-39261) that affect multiple versions of Drupal Core.
Microsoft update for Microsoft Exchange Server zero-day ProxyNotShell vulnerabilities
Microsoft has released a new security update for two Microsoft Exchange Server zero-day vulnerabilities (CVE-2022-41040 and CVE-2022-41082) dubbed “ProxyNotShell” under limited targeted attacks in the wild.
Sophos Firewall RCE vulnerability (CVE-2022-3236) exploited the wild
Sophos has fixed a Sophos Firewall remote code execution (RCE) vulnerability (CVE-2022-3236) exploited in the wild.
ISC fixes High risk BIND vulnerabilities, BIND 9 Security Vulnerability Matrix
The Internet Systems Consortium (ISC) has released new security updates that fix four High risk vulnerabilities in multiple versions of BIND, as well as BIND 9 Security Vulnerability Matrix.
Mozilla releases Firefox 105 with fixes for 3 High severity vulnerabilities
The Mozilla Foundation has patched four High risk vulnerabilities in Firefox 105, as well as a number of other bug fixes.
Microsoft releases out-of-band patch for Endpoint Configuration Manager
Microsoft has released an out-of-band patch for a Endpoint Configuration Manager vulnerability CVE-2022-37972.
Adobe security updates for multiple products
Adobe has released security updates that address multiple vulnerabilities in Animate, Bridge, Experience Manager, Illustrator, InCopy, InDesign, and Photoshop.