Hardening Archives - CyberConvoy Blog

Atlassian patches critical RCE flaws across multiple products

System administrators should prioritize applying the available updates

6 December

Zero-Day Alert: Apple Rolls Out iOS, macOS, and Safari Patches for 2 Actively Exploited Flaws

Apple has released software updates for iOS, iPadOS, macOS, and Safari web browser to address two security flaws that it said have come under active exploitation in the wild on older versions of its software.

1 December

VMware fixes critical Cloud Director auth bypass unpatched for 2 weeks

12/01/2023
Cyber News
0day, Hardening

Cloud Director is a VMware platform that enables admins to manage data centers spread across multiple locations as Virtual Data Centers

1 December

Hackers start exploiting critical ownCloud flaw, patch now

In containerized deployments, these environment variables may include sensitive data such as the ownCloud admin password, mail server credentials, and license key

28 November

Microsoft November 2023 Patch Tuesday fixes 5 zero-days, 58 flaws

11/14/2023
Cyber News
Hardening, Patching, Security, Technology

This month's Patch Tuesday fixes five zero-day vulnerabilities, with three exploited in attacks and three publicly disclosed

14 November

Critical Azure CLI flaw found that leaked credentials in logs

They found that successful exploitation enables unauthenticated attackers to remotely access plain text contents written by Azure CLI to Continuous Integration and Continuous Deployment (CI/CD) logs

14 November

The Rise of Ransomware in Healthcare: What IT Leaders Need to Know

Unlike other types of breaches where data might be silently exfiltrated, ransomware openly declares its presence by locking out organizations from their data

10 November

Critical Flaws Discovered in Veeam ONE IT Monitoring Software – Patch Now

Over the past few months, critical flaws in the Veeam backup software have been exploited by multiple threat actors, including FIN7 and BlackCat ransomware, to distribute malware

7 November

QNAP warns of critical command injection flaws in QTS OS, apps

QNAP users are advised to apply the available security updates as soon as possible

6 November

Citrix warns admins to patch NetScaler CVE-2023-4966 bug immediately

Citrix warned admins today to secure all NetScaler ADC and Gateway appliances immediately against ongoing attacks exploiting the CVE-2023-4966 vulnerability

24 October