CyberConvoy Blog

Microsoft December 2022 Patch Tuesday fixes 2 zero-days, 49 flaws

Six of the 49 vulnerabilities fixed with this update are classified as 'Critical' as they allow remote code execution, one of the most severe vulnerabilities

14 December

New Actively Exploited Zero-Day Vulnerability Discovered in Apple Products

Apple rolled out security updates to iOS, iPadOS, macOS, tvOS, and Safari web browsers to address a new zero-day vulnerability that results in remote code execution

14 December

New Python malware backdoors VMware ESXi servers for remote access

12/14/2022
Cyber News
Exploit, Hacking, Hardening, Patching, PrivEsc

A previously undocumented Python backdoor targeting VMware ESXi servers has been spotted, enabling hackers to execute commands remotely on a compromised system

14 December

Fortinet says the SSL-VPN pre-auth RCE bug is exploited in attacks

Fortinet urges customers to patch their appliances against an actively exploited FortiOS SSL-VPN vulnerability that could allow unauthenticated remote code execution on devices

14 December

Hackers exploit critical Citrix ADC and Gateway zero-day

12/14/2022
Cyber News
0day, Exploit, Hacking, Patching, Security

This new vulnerability allows an unauthenticated attacker to execute commands remotely on vulnerable devices and take control of them

14 December

Google Chrome Flaw Added to CISA Patch List

Google has already released a fixed version of Chrome browser for Windows, Mac, and Linux users. CISA has given government agencies until Dec. 26 to get a patch

10 December

Experts created a technique to bypass web application firewalls (WAF) of several major vendors

Researchers have verified that the bypass attack technique has worked against firewalls from multiple vendors, including Cloudflare, F5, Imperva, and Palo Alto Networks

9 December

Cisco discloses high-severity IP phone bug with exploit code

Cisco has disclosed today a high-severity vulnerability affecting the latest generation of its IP phones and exposing them to remote code execution and denial of service (DoS) attacks

8 December