Securezoo Cybersecurity Threat Center blog posts of new vulnerabilities and exploits.
Security researchers have discovered a chain of Dell Client BIOS (BIOSConnect feature) vulnerabilities that impact 129 Dell models and millions of Dell devices worldwide.
Chain of BIOSConnect vulnerabilities impact millions of Dell devices Read More »
Cybersecurity researchers have discovered a series of chained Atlassian vulnerabilities that could have allowed an attacker to take over an Atlassian account connected via SSO and control Atlassian applications.
Attackers could have taken over an Atlassian account via one-click exploit Read More »
VMware has patched a Critical authentication vulnerability CVE-2021-21998 in VMware Carbon Black App Control (AppC). The tech giant also issued a security advisory for a High risk vulnerability in VMware Tools, VMware Remote Console for Windows (VMRC) and VMware App Volumes products.
Threat actors from suspected North Korea APT group Kimsuky breached a South Korean atomic research institute via a VPN vulnerability.
Threat actors breach South Korean atomic research institute via VPN vulnerability Read More »
Google has released Chrome 91 security update 91.0.4472.114 for Windows, Mac and Linux with fixes for multiple High severity vulnerabilities, one of those a zero-day vulnerability CVE-2021-30554 exploited in the wild.
Google fixes Chrome zero-day (CVE-2021-30554) exploited in the wild Read More »
A vulnerability in ThroughTek’s Kalay Platform software development hit (SDK) has exposed many security cameras used by original equipment manufacturers (OEMs) of consumer-grade security cameras and IoT devices.
SDK supply chain vulnerability exposes security cameras to hacking Read More »
Apple has released a security update for iOS 12.5.4 to fix two vulnerabilities (CVE-2021-30761 and CVE-2021-30762) exploited in the wild.
Apple iOS 12.5.4 security update fixes two vulnerabilities exploited in the wild Read More »
Security researchers have spotted thousands of vulnerable unpatched VMware vCenter servers exposed on the internet. Multiple proof-of-concepts (PoCs) have also been posted online for exploits against a remote code execution (RCE) vulnerability CVE-2021-21985.
Thousands of unpatched VMware vCenter servers exposed on the internet Read More »
A security researcher has discovered a seven-year old polkit privileged escalation vulnerability CVE-2021-3560 that could allow a remote attacker root shell access on Linux systems.
7-year old polkit vulnerability could allow hackers root shell on Linux systems Read More »
Google has released Chrome 91 security update 91.0.4472.101 for Windows, Mac and Linux with fixes for multiple Critical or High severity vulnerabilities, one of those a zero-day vulnerability CVE-2021-30551 exploited in the wild.
Google fixes Chrome zero-day (CVE-2021-30551) exploited in the wild Read More »
