CVE-2018-20250 Archives

CISA adds 9 vulnerabilities to Known Exploited Vulnerabilities Catalog (to include new Adobe and Chrome zero-days)

Security Updates & Patches, Vulnerabilities & Exploits, Zero-days / Frank Crast / February 16, 2022 / CVE-2013-3906, CVE-2014-1761, CVE-2017-9841, CVE-2018-15982, CVE-2018-20250, CVE-2018-8174, CVE-2019-0752, CVE-2022-0609, CVE-2022-24086

The Cybersecurity and Infrastructure Security Agency (CISA) has added 9 vulnerabilities to its Known Exploited Vulnerabilities Catalog. The issues include recently patched Adobe and Chrome zero-days.

CISA adds 9 vulnerabilities to Known Exploited Vulnerabilities Catalog (to include new Adobe and Chrome zero-days) Read More »

The top 20 vulnerabilities to patch now (that are most under attack)

Cybersecurity Articles, Cybersecurity Attacks, Vulnerabilities & Exploits, Zero-days / Frank Crast / December 26, 2019 / Apache, BlueKeep, CVE-2012-0158, CVE-2014-8361, CVE-2017-0143, CVE-2017-0199, CVE-2017-10271, CVE-2017-11882, CVE-2017-17215, CVE-2017-5638, CVE-2017-5715, CVE-2017-8570, CVE-2017-8759, CVE-2018-0802, CVE-2018-10561, CVE-2018-12130, CVE-2018-20250, CVE-2018-4878, CVE-2018-7600, CVE-2018-8174, CVE-2019-0708, CVE-2019-2725, IOT, Loki, MDS, Meltdown, Nanocore, Spectre, Struts, Verint, Vulnerabilities, WebLogic, WinRAR, Zyklon

Security firm Verint analyzed the top 20 vulnerabilities to patch now that are under active attack and exploited by cyber attack groups worldwide. The report is aimed at assisting security teams in prioritizing and enhancing their organization’s patch management efforts.

The top 20 vulnerabilities to patch now (that are most under attack) Read More »

Microsoft provides new details on WinRar bug exploits

Cybersecurity Attacks, Vulnerabilities & Exploits / Frank Crast / April 11, 2019 / ATP, CVE-2018-20250, Microsoft, MuddyWater, Office 365, WinRAR

Microsoft security researchers revealed additional details on how cyber attackers were able to exploit the 19 year old WinRar vulnerability last March.

Microsoft provides new details on WinRar bug exploits Read More »

Attackers are exploiting WinRAR, a 19 year old vulnerability

Vulnerabilities & Exploits / Frank Crast / March 15, 2019 / Check Point, CVE-2018-20250, McAfee, WinRAR

Cyber attackers are exploiting a 19 year old high severity code execution vulnerability in WinRAR, a popular compression tool used to create and view archives in RAR or ZIP file formats and can unpack numerous archive file formats.

Attackers are exploiting WinRAR, a 19 year old vulnerability Read More »