Hardening Archives - Page 2 of 6

Apple fixes new zero-day used in attacks against iPhones, Macs

Attackers could exploit it on unpatched devices to modify sensitive kernel states

25 July

Ivanti patches MobileIron zero-day bug exploited in attacks

An authentication bypass vulnerability in Ivanti EPMM allows unauthorized users to access restricted functionality or resources of the application without proper authentication

25 July

Microsoft expands access to cloud logging data for free after Exchange hacks

Due to these discussions, Microsoft says that they are expanding access to the premium cloud logging to all customers for free

20 July

New critical Citrix ADC and Gateway flaw exploited as zero-days

Exploits of CVE-2023-3519 on unmitigated appliances have been observed - customers urged to update vulnerable instances

18 July

SonicWall warns admins to patch critical auth bypass bugs immediately

Successful exploitation enables unauthorized access to data that would typically be inaccessible to an attacker

13 July

Apple Issues Urgent Patch for Zero-Day Flaw Targeting iOS, iPadOS, macOS, and Safari

07/11/2023
Cyber News
0day, Hardening

The WebKit bug, cataloged as CVE-2023-37450, could allow threat actors to achieve arbitrary code execution when processing specially crafted web content

11 July

Another Critical Unauthenticated SQLi Flaw Discovered in MOVEit Transfer Software

These vulnerabilities affect multiple MOVEit Transfer versions, including 12.1.10 and previous versions, 13.0.8 and earlier, 13.1.6 and earlier, 14.0.6 and older, 14.1.7 and older, and 15.0.3 and earlier

8 July