Patching Archives - Page 12 of 14

Microsoft October 2022 Patch Tuesday fixes zero-day used in attacks, 84 flaws

This month's Patch Tuesday fixes two publicly zero-day vulnerabilities, one actively exploited in attacks and one publicly disclosed.

11 October

Researchers Detail Critical RCE Flaw Reported in Popular vm2 JavaScript Sandbox

10/11/2022
Cyber News
0day, Exploit, Hacking, Patching, PrivEsc, RCE

In light of the critical nature of the vulnerability, users are recommended to update to the latest version as soon as possible to mitigate possible threats.

11 October

Microsoft Issues Improved Mitigations for Unpatched Exchange Server Vulnerabilities

10/08/2022
Cyber News
Exploit, Hacking, Hardening, Malware, Patching, PrivEsc, RCE, Security

Successful weaponization of the flaws could enable an authenticated attacker to chain the two vulnerabilities to achieve remote code execution on the underlying server

8 October

BlackByte Ransomware Abuses Vulnerable Windows Driver to Disable Security Solutions

10/08/2022
Cyber News
Breach, Exploit, Hacking, Hardening, Malware, Patching, PrivEsc, Ransomware, RCE, Security

An analysis of the ransomware sample has uncovered multiple similarities between the EDR bypass implementation and that of a C-based open-source tool called EDRSandblast, designed to abuse vulnerable signed drivers to evade detection.

8 October

Fortinet warns admins to patch critical auth bypass bug immediately

10/07/2022
Cyber News
0day, Exploit, Hacking, Patching, PrivEsc, RCE, Security

An authentication bypass using an alternate path or channel [CWE-88] in FortiOS and FortiProxy may allow an unauthenticated attacker to perform operations on the administrative interface via specially crafted HTTP or HTTPS requests

7 October

CISA: Hackers exploit critical Bitbucket Server flaw in attacks

10/01/2022
Cyber News
0day, Breach, Exploit, Hacking, Malware, Patching, RCE

The Cybersecurity and Infrastructure Security Agency (CISA) has added three more security flaws to its list of bugs exploited in attacks, including a Bitbucket Server RCE and two Microsoft Exchange zero-days.

1 October

New malware backdoors VMware ESXi servers to hijack virtual machines

10/01/2022
Cyber News
Breach, C2, Exploit, Hacking, Malware, Patching

With the help of malicious vSphere Installation Bundles, the attacker could install on the bare-metal hypervisor two backdoors

1 October

New Microsoft Exchange zero-day actively exploited in attacks

09/29/2022
Cyber News
Exploit, Hacking, Patching, PrivEsc, RCE, Security, Uncategorized

The vulnerability turns out to be so critical that it allows the attacker to do RCE on the compromised system

29 September

Sophos warns of new firewall RCE bug exploited in attacks

09/24/2022
Cyber News
0day, Exploit, Hacking, Malware, Patching, PrivEsc, RCE

Tracked as CVE-2022-3236, the flaw was found in the User Portal and Webadmin of Sophos Firewall, allowing attackers to perform remote code execution (RCE)

24 September