22 May 2022

0day

Firefox Vulnerability: Exploited in The Wild – Update Now! Firefox Vulnerability
3 min read

Firefox Vulnerability: Exploited in The Wild – Update Now!

RiSec 5 March 2022
Mozilla has published Firefox 97.0.2, an “out-of-band” update that closes two bugs that are officially listed as critical. Firefox Vulnerability March 2022 Mozilla reports that both of these holes are already actively being exploited, making them so-called zero-day bugs, which means, in simple terms, that the crooks got there first: We have had reports of attacks in the wild abusing [these] flaw[s]. Access to information about the bugs is still restricted to Mozilla insiders, presumably to make it harder for attackers to get at the technical details of how to exploit...
Continue Reading
Adobe Issues an Emergency Patch to Address an Exploited Commerce Zero-Day Vulnerability Zero-day
2 min read

Adobe Issues an Emergency Patch to Address an Exploited Commerce Zero-Day Vulnerability

RiSec 14 February 2022
Yesterday, Adobe issued an emergency advisory to notify users of Adobe Commerce and Magento about a critical zero-day vulnerability that has been exploited in attacks. As per the tech giant’s threat data, the security issue is being used “in very limited attacks targeting Adobe Commerce merchants.” To address the critical security flaw affecting its products, the American multinational computer software company has developed patches, which are delivered as MDVA-43395 EE 2.4.3-p1 v1. The vulnerability has been identified as CVE-2022-24086, with a CVSS score of 9.8. It is characterized as an improper input validation issue...
Continue Reading
Google Details Two Zero-Day Bugs Reported in Zoom Clients and MMR Servers Zero-day
3 min read

Google Details Two Zero-Day Bugs Reported in Zoom Clients and MMR Servers

RiSec 20 January 2022
An exploration of zero-click attack surface for the popular video conferencing solution Zoom has yielded two previously undisclosed security vulnerabilities that could be exploited to crash the service, execute malicious code, and even leak arbitrary areas of its memory. Natalie Silvanovich of Google Project Zero, who discovered and reported the two flaws last year, said the issues impact both Zoom clients and Multimedia Router (MMR) servers, which transmit audio and video content between clients in on-premise deployments. The weaknesses have since been addressed by Zoom as part of updates shipped on November 24, 2021. The goal of...
Continue Reading
Apple patches three actively exploited zero‑day flaws in iOS apple
2 min read

Apple patches three actively exploited zero‑day flaws in iOS

RiSecPy 12 November 2020
Long list of vulnerable actively exploited devices Apple has released patches of its own to fix three zero-day vulnerabilities under active attacks. The trio of flaws, affecting a broad range of Apple’s products, also happened to be unearthed by the bug-hunting crew. “Apple is aware of reports that an exploit for this issue exists in the wild,” reads the company’s security bulletin describing each of the three flaws. Impacted Devices iPhone 6s and later iPod touch 7th generation iPad Air 2 and later, iPad mini 4 and later. The Cupertino tech...
Continue Reading
Cyber Knowledge Base

You may have missed

CISA adds CVE-2022-30525 flaw in Zyxel Firewalls to its Known Exploited Vulnerabilities Catalog Avast, AVG Release Security Updates for Decade-Old Vulnerability
3 min read

CISA adds CVE-2022-30525 flaw in Zyxel Firewalls to its Known Exploited Vulnerabilities Catalog

17 May 2022
Over 200 Apps on Play Store Caught Spying on Android Users Using Facestealer google-play-store-malware
3 min read

Over 200 Apps on Play Store Caught Spying on Android Users Using Facestealer

17 May 2022
Killnet hackers announce Russian cyber attacks on UK for standing up to Putin’s war cybersecurity news
2 min read

Killnet hackers announce Russian cyber attacks on UK for standing up to Putin’s war

16 May 2022
Brazilian e-commerce firm Americanas reports multimillion-dollar loss following cyberattack CyberSecurity
2 min read

Brazilian e-commerce firm Americanas reports multimillion-dollar loss following cyberattack

16 May 2022
en English
af Afrikaanssq Albanianam Amharicar Arabichy Armenianaz Azerbaijanieu Basquebe Belarusianbn Bengalibs Bosnianbg Bulgarianca Catalanceb Cebuanony Chichewazh-CN Chinese (Simplified)zh-TW Chinese (Traditional)co Corsicanhr Croatiancs Czechda Danishnl Dutchen Englisheo Esperantoet Estoniantl Filipinofi Finnishfr Frenchfy Frisiangl Galicianka Georgiande Germanel Greekgu Gujaratiht Haitian Creoleha Hausahaw Hawaiianiw Hebrewhi Hindihmn Hmonghu Hungarianis Icelandicig Igboid Indonesianga Irishit Italianja Japanesejw Javanesekn Kannadakk Kazakhkm Khmerko Koreanku Kurdish (Kurmanji)ky Kyrgyzlo Laola Latinlv Latvianlt Lithuanianlb Luxembourgishmk Macedonianmg Malagasyms Malayml Malayalammt Maltesemi Maorimr Marathimn Mongolianmy Myanmar (Burmese)ne Nepalino Norwegianps Pashtofa Persianpl Polishpt Portuguesepa Punjabiro Romanianru Russiansm Samoangd Scottish Gaelicsr Serbianst Sesothosn Shonasd Sindhisi Sinhalask Slovaksl Slovenianso Somalies Spanishsu Sudanesesw Swahilisv Swedishtg Tajikta Tamilte Teluguth Thaitr Turkishuk Ukrainianur Urduuz Uzbekvi Vietnamesecy Welshxh Xhosayi Yiddishyo Yorubazu Zulu