Vulnerabilities & Exploits Archives - Page 27 of 106

Google releases Chrome 97 security update (97.0.4692.71) with fixes for 37 vulnerabilities

Security Updates & Patches, Vulnerabilities & Exploits / Frank Crast / January 6, 2022 / Android, Chrome, CVE-2022-0096, CVE-2022-0097, CVE-2022-0098, CVE-2022-0099, CVE-2022-0100, CVE-2022-0101, CVE-2022-0102, CVE-2022-0103, CVE-2022-0104, CVE-2022-0105, CVE-2022-0106

Google has released Chrome 97 security update (97.0.4692.71) for Windows, Mac and Linux with fixes for one Critical and ten High risk vulnerabilities.

Google releases Chrome 97 security update (97.0.4692.71) with fixes for 37 vulnerabilities Read More »

Hackers can exploit doorLock HomeKit vulnerability on iPhones to launch DoS attacks

Malware, Mobile Security, Vulnerabilities & Exploits / Frank Crast / January 4, 2022 / doorLock, DOS, HomeKit, iOS, iPhone

Hackers can exploit an iPhone HomeKit vulnerability dubbed “doorLock” on iPhones to launch persistent denial of service (DoS) attacks, a researcher says.

Hackers can exploit doorLock HomeKit vulnerability on iPhones to launch DoS attacks Read More »

Threat hunters discover Aquatic Panda Log4Shell exploit attempts

Cybersecurity Attacks, Vulnerabilities & Exploits / Frank Crast / January 2, 2022 / Apache, APT, Aquatic Panda, CVE-2021-44228, Log4j, log4Shell

Threat hunters from CrowdStrike have discovered Aquatic Panda cyber gang using Log4Shell exploit tools in recent intrusion attempts against a customer.

Threat hunters discover Aquatic Panda Log4Shell exploit attempts Read More »

Apache releases security update for another Log4j RCE vulnerability (CVE-2021-44832)

Security Updates & Patches, Vulnerabilities & Exploits / Frank Crast / December 30, 2021 / Apache, CVE-2021-44832, Log4j, RCE

The Apache Software Foundation has released a new security update to address another Log4j vulnerability (CVE-2021-44832) where Log4j2 is vulnerable to remote code execution (RCE) via JDBC Appender when an attacker controls a configuration file.

Apache releases security update for another Log4j RCE vulnerability (CVE-2021-44832) Read More »

NotLegit: 4-year old Microsoft Azure App Service 0-day vulnerability affects source code repositories

Application Security, Cybersecurity Attacks, Vulnerabilities & Exploits / Frank Crast / December 29, 2021 / 0-day, App Service, Azure, GitHub, IIS, Local Git, Microsoft, Node, PHP, Python, Ruby, Windows

A four-year old Microsoft Azure App Service 0-day vulnerability dubbed “NotLegit” affects hundreds of source code repositories.

NotLegit: 4-year old Microsoft Azure App Service 0-day vulnerability affects source code repositories Read More »

Apache patches 2 vulnerabilities in HTTP Server 2.4.51

Security Updates & Patches, Vulnerabilities & Exploits / Frank Crast / December 27, 2021 / Apache, HTTP Server, HTTPD, ProxyRequests

The Apache HTTP Server Project has patched two vulnerabilities in Apache HTTP Server 2.4.51, one of those rated High severity.

Apache patches 2 vulnerabilities in HTTP Server 2.4.51 Read More »

Apache releases new Log4k security update to fix another RCE vulnerability (CVE-2021-45046)

Security Updates & Patches, Vulnerabilities & Exploits / Frank Crast / December 20, 2021 / Apache, CVE_2021-44228, CVE-2021-45046, Log4j, log4Shell

As affected organizations and vendors continue to identify products affected by Log4Shell remote code execution (RCE) Log4j vulnerability, Apache has released additional Log4j security updates to fix another RCE vulnerability (CVE-2021-45046).

Apache releases new Log4k security update to fix another RCE vulnerability (CVE-2021-45046) Read More »

Palo Alto Networks offers proactive protections against Apache Log4j vulnerability with Threat Prevention

Security Updates & Patches, Vulnerabilities & Exploits / Frank Crast / December 17, 2021 / Apache, Cortex XDR, Log4j, log4Shell, Palo Alto Networks, Prisma Cloud

As organizations continue to discover and patch the severe Apache Log4j vulnerability on their networks, Palo Alto Networks is recommending their customers leverage their next generation firewalls with Threat Prevention service, along with Cortex XDR and Prisma Cloud to help mitigate the threat.

Palo Alto Networks offers proactive protections against Apache Log4j vulnerability with Threat Prevention Read More »

Google adds OSS-Fuzz open source fuzzer capability to discover Log4Shell vulnerability

Cybersecurity Attacks, Security Updates & Patches, Vulnerabilities & Exploits / Frank Crast / December 17, 2021 / Apache, fuzzer, Log4j, log4Shell, Open Source, OSS-Fuzz

As the catastrophic Log4j vulnerability continues to cause havoc on the internet and organizations, Google in collaboration with security firm Code Intelligence has released an update to open source fuzzer (OSS-Fuzz) that can detect the Log4Shell vulnerability.

Google adds OSS-Fuzz open source fuzzer capability to discover Log4Shell vulnerability Read More »

Microsoft December 2021 Security Updates includes fix for zero-day exploit used to spread Emotet malware

Security Updates & Patches, Vulnerabilities & Exploits, Zero-days / Frank Crast / December 15, 2021 / CVE-2021-42310, CVE-2021-43215, CVE-2021-43217, CVE-2021-43233, CVE-2021-43890, CVE-2021-43899, CVE-2021-43905, CVE-2021-43907, Emotet, Windows

Microsoft has released the December 2021 Security Updates that includes patches for 73 vulnerabilities, 7 of those rated Critical. The updates also address one vulnerability being actively exploited in the wild and used to spread Emotet malware.

Microsoft December 2021 Security Updates includes fix for zero-day exploit used to spread Emotet malware Read More »