Exploits and vulnerabilities – Page 12 – Computer Security Articles

Update now! Microsoft patches a whopping 130 vulnerabilities

July 12, 2023 admin adobe, Android, apple, Cisco, cve-2023-32046, cve-2023-32049, cve-2023-35311, cve-2023-36844, cve-2023-36874, Exploits and vulnerabilities, fortinet, microsoft, moveit, Mozilla, news, SAP, VMware

Categories: Exploits and vulnerabilities

Categories: News

Tags: Microsoft

Tags: Adobe

Tags: Apple

Tags: Android

Tags: Cisco

Tags: Fortinet

Tags: MOVEit

Tags: Mozilla

Tags: SAP

Tags: VMware

Tags: CVE-2023-32049

Tags: CVE-2023-35311

Tags: CVE-2023-32046

Tags: CVE-2023-36874

Tags: CVE-2023-36844

For the July 2023 Patch Tuesday, Microsoft has issued security updates for 130 vulnerabilities, four of which are known to have been actively exploited.

MalwareBytes Security

Apple issues Rapid Security Response for zero-day vulnerability

July 11, 2023 admin apple, Code Execution, cve-2023-37450, drive-by, Exploits and vulnerabilities, iOS, ipados, MacOS, news, safari, Webkit

Categories: Exploits and vulnerabilities

Categories: News

Tags: Apple

Tags: Safari

Tags: WebKit

Tags: macOS

Tags: iOS

Tags: iPadOs

Tags: CVE-2023-37450

Tags: drive-by

Tags: code execution

Apple has issued an update for a zero-day vulnerability in the WebKit browser engine which may be actively exploited.

MalwareBytes Security

MOVEit Transfer fixes three new vulnerabilities

July 10, 2023 admin cve-2023-36932, cve-2023-36933, cve-2023-36934, Exploits and vulnerabilities, moveit, news, progress, ransomware, vulnerabilities

Categories: Exploits and vulnerabilities

Categories: News

Categories: Ransomware

Tags: Progress

Tags: MOVEit

Tags: vulnerabilities

Tags: CVE-2023-36934

Tags: CVE-2023-36932

Tags: CVE-2023-36933

CISA has warned users about three new vulnerabilities in Progress Software’s MOVEit Transfer software.

(Read more…)

The post MOVEit Transfer fixes three new vulnerabilities appeared first on Malwarebytes Labs.

MalwareBytes Security

Warning issued over vulnerability in cardiac device monitoring software

July 7, 2023 admin cve-2023-31222, deserialization, Exploits and vulnerabilities, medtronic, messaging, news, paceart optima, update

Categories: Exploits and vulnerabilities

Categories: News

Tags: Medtronic

Tags: Paceart Optima

Tags: CVE-2023-31222

Tags: deserialization

Tags: update

Tags: messaging

A vulnerability in Medtronic’s Paceart Optima software could lead to further network penetration, RCE, and DoS attacks

MalwareBytes Security

Warning issued over vulnerability in cardiac devices

July 6, 2023 admin cve-2023-31222, deserialization, Exploits and vulnerabilities, medtronic, messaging, news, paceart optima, update

Categories: Exploits and vulnerabilities

Categories: News

Tags: Medtronic

Tags: Paceart Optima

Tags: CVE-2023-31222

Tags: deserialization

Tags: update

Tags: messaging

A vulnerability in Medtronic’s Paceart Optima cardiac device could lead to further network penetration, RCE, and DoS attacks

MalwareBytes Security

Update Android now! Google patches three actively exploited zero-days

July 6, 2023 admin 2023-07-05, Android, ARM, cve-2023-21250, cve-2023-2136, cve-2023-26083, cve2021-29256, Exploits and vulnerabilities, google, news, skia

Categories: Exploits and vulnerabilities

Categories: News

Tags: Google

Tags: Android

Tags: 2023-07-05

Tags: CVE2021-29256

Tags: CVE-2023-26083

Tags: CVE-2023-2136

Tags: CVE-2023-21250

Tags: ARM

Tags: Skia

Google has patched 43 vulnerabilities in Android, three of which are actively exploited zero-day vulnerabilities.

MalwareBytes Security

Microsoft Azure AD flaw can lead to account takeover

June 23, 2023 admin Azure, Exploits and vulnerabilities, idp, login with, microsoft, news, noauth, OAuth

Categories: Exploits and vulnerabilities

Categories: News

Tags: OAuth

Tags: nOAuth

Tags: IdP

Tags: Azure

Tags: Microsoft

Tags: login with

Researchers have found a flaw in Microsoft Azure AD which they claim can be used to take over accounts that rely on pre-established trust.

MalwareBytes Security

Update now! Apple fixes three actively exploited vulnerabilities

June 22, 2023 admin apple, cve-2023-32434, cve-2023-32435, cve-2023-32439, Exploits and vulnerabilities, integer overflow, kernel webkit, news, operation triangulation, Type Confusion

Categories: Apple

Categories: Exploits and vulnerabilities

Categories: News

Tags: Apple

Tags: kernel webkit

Tags: CVE-2023-32434

Tags: CVE-2023-32435

Tags: CVE-2023-32439

Tags: type confusion

Tags: integer overflow

Tags: operation triangulation

Apple has released security updates for several products to address a set of flaws it said were being actively exploited.