Vulnerabilities & Exploits Archives - Page 31 of 106

GoCD patches ‘Highly Critical’ authentication vulnerability

Application Security, Security Updates & Patches, Vulnerabilities & Exploits / Frank Crast / October 29, 2021 / CI/CD, CICD, developer, GoCD, SDLC, Software

GoCD has patched a Critical authentication vulnerability in its GoCD CI/CD tool.

GoCD patches ‘Highly Critical’ authentication vulnerability Read More »

BIND fixes lame cache vulnerability (CVE-2021-25219)

Security Updates & Patches, Vulnerabilities & Exploits / Frank Crast / October 29, 2021 / BIND, CVE-2021-25219, DNS, ISC

The Internet Systems Consortium (ISC) has released a security update that fixes a lame cache vulnerability in multiple versions of ISC Berkeley Internet Name Domain (BIND).

BIND fixes lame cache vulnerability (CVE-2021-25219) Read More »

Google releases Chrome 95 security update (95.0.4638.69) with fixes for 2 High risk zero-days exploited in the wild

Security Updates & Patches, Vulnerabilities & Exploits, Zero-days / Frank Crast / October 29, 2021 / Chrome, Chrome 95, CVE-2021-38000, CVE-2021-38003

Google has released Chrome 95 security update (95.0.4638.69) for Windows, Mac and Linux with fixes for multiple High risk vulnerabilities, 2 of those are being exploited in the wild.

Google releases Chrome 95 security update (95.0.4638.69) with fixes for 2 High risk zero-days exploited in the wild Read More »

Adobe security updates for Adobe Photoshop, Illustrator and 12 other products

Security Updates & Patches, Vulnerabilities & Exploits / Frank Crast / October 27, 2021 / Adobe, After Effects, Animate, Audition, Bridge, Illustrator, InDesign, Lightroom, Media Encoder, Photoshop, Prelude, XMP Toolkit

Adobe has released security updates for Adobe Photoshop, Illustrator and 12 other products.

Adobe security updates for Adobe Photoshop, Illustrator and 12 other products Read More »

Apples releases security updates for iOS 15.1, macOS Big Sur 11.6.1, and new macOS Monterey 12.0.1

Security Updates & Patches, Vulnerabilities & Exploits / Frank Crast / October 27, 2021 / Apple, Catalina, Control Center, iOS, iOS15, macOS, Monterey, Privacy, Shareplay

Apples has released security updates for iOS 15.1, macOS Big Sur 11.6.1, new macOS Monterey 12.0.1, and other Apple products.

Apples releases security updates for iOS 15.1, macOS Big Sur 11.6.1, and new macOS Monterey 12.0.1 Read More »

Embedded malware discovered in NPM package ua-parser-js

Application Security, Malware, Security Updates & Patches, Third-Party Security, Vulnerabilities & Exploits / Frank Crast / October 27, 2021 / JavaScript, malware, NPM, ua-parser-js, User-Agent

Embedded malware has been discovered in an NPM package ua-parser-js, a popular JavaScript library designed to detect browser, engine, OS, CPU, and device type/model from User-Agent data.

Embedded malware discovered in NPM package ua-parser-js Read More »

BlackMatter ransomware has targeted multiple U.S. critical infrastructure entities

Cybersecurity Attacks, Security Updates & Patches, Vulnerabilities & Exploits / Frank Crast / October 23, 2021 / BlackMatter, CISA, FBI, malware, NSA, RaaS

BlackMatter ransomware has targeted multiple U.S. critical infrastructure entities, to include two U.S. Food and Agriculture Sector organizations.

BlackMatter ransomware has targeted multiple U.S. critical infrastructure entities Read More »

Cisco SD-WAN command injection vulnerability could lead to code execution as root

Network Security, Security Updates & Patches, Vulnerabilities & Exploits / Frank Crast / October 23, 2021 / ATA, Cisco, CVE-2021-1529, CVE-2021-34698, CVE-2021-34710, CVE-2021-34735, IOS XE, SD-WAN, WSA

Cisco has fixed a High risk Cisco IOS XE SD-WAN Software command injection vulnerability that could allow a hacker to execute code with root privileges. The tech giant also released security updates for Analog Telephone Adapter and Web Security Appliance vulnerabilities.

Cisco SD-WAN command injection vulnerability could lead to code execution as root Read More »