Securezoo Cybersecurity Threat Center blog posts of new vulnerabilities and exploits.
Microsoft has released two additional Windows security updates that address the Spectre side-channel vulnerabilities that were revealed in January of 2018.
Microsoft patches more Spectre vulnerabilities Read More »
Drupal issued a security advisory (SA-CORE-2018-004) on Wednesday to address a Highly Critical Remote Code Execution vulnerability (CVE-2018-7602). It is important to note this vulnerability is being exploited in the wild. An excerpt from the advisory:  “A remote code execution vulnerability exists within multiple subsystems of Drupal 7.x and 8.x. This potentially allows attackers to exploit multiple attack vectors
Drupal security update Read More »
A new vulnerability dubbed “Total Meltdown” was discovered last month after Microsoft issued patches to fix the previous Meltdown vulnerabilities.
Total Meltdown vulnerability exploit source code now on GitHub Read More »
An advanced persistent threat (APT) hacking group has been exploiting an unpatched Internet Explorer (IE) vulnerability to infect Windows PCs with malware.
APT group is exploiting unpatched IE vulnerability Read More »
Security researchers from Symantec have disclosed a new iOS vulnerability dubbed ‘Trustjacking’ that allows an attacker to exploit an iTunes Wi-Fi Sync feature and take control of a victim’s device.
“Trustjacking” iOS vulnerability Read More »
Oracle has released its Critical Patch Update (CPU) for April 2018 that addresses 254 vulnerabilities across multiple products.
Oracle Critical Patch Updates for April 2018 Read More »
Microsoft issued April 2018 Security Updates that include at least 63 vulnerability fixes, 22 of them rated critical.
Microsoft April 2018 patch updates Read More »
Intel released new details of availability for microcode updates that address the Meltdown and Spectre design flaws in Intel processors. According to the company, Intel has stopped working on microcode updates for certain Intel processors as noted in the release.
Intel Spectre and Meltdown vulnerability guidance Read More »
OpenSSL has released security updates to address several vulnerabilities that impact previous versions of OpenSSL 1.1.0 and 1.0.2.
OpenSSL fixes 3 vulnerabilities Read More »
Microsoft issued new security guidance on the Credential Security Support Provider protocol (CredSSP) vulnerability (CVE-2018-0886) that could allow remote code execution. As part of the updates, Microsoft plans to soon prevent un-patched RDP clients (that uses CredSSP) from authenticating to Windows.
Microsoft fixes CredSSP vulnerability Read More »
