Exploits and vulnerabilities – Page 25 – Computer Security Articles

MalwareBytes Security

Update Chrome now: Four high risk vulnerabilities found

June 13, 2022 admin chrome, CVE, exploit, Exploits and vulnerabilities, google, update, Vulnerability

Credit to Author: Christopher Boyd| Date: Mon, 13 Jun 2022 14:20:34 +0000

We take a look at the latest batch of vulnerabilities in Chrome requiring an update.

The post Update Chrome now: Four high risk vulnerabilities found appeared first on Malwarebytes Labs.

MalwareBytes Security

Serious vulnerabilities found in ITarian software, patches available for SaaS products

June 13, 2022 admin cve-2022-25151, cve-2022-25152, cve-2022-25153, divd, Exploits and vulnerabilities, itarian, MSP, SaaS, XSS

Credit to Author: Pieter Arntz| Date: Mon, 13 Jun 2022 12:25:19 +0000

Researchers at DIVD found vulnerabilities in ITarian products and worked with the vendor to develop patches. These patches are now available.

The post Serious vulnerabilities found in ITarian software, patches available for SaaS products appeared first on Malwarebytes Labs.

MalwareBytes Security

Update now! Patch against vulnerabilities in Meeting Owl Pro and Whiteboard Owl devices

June 9, 2022 admin blé, Exploits and vulnerabilities, hardcoded, meeting owl, modzero, owl labs, passcode, whiteboard owl

Credit to Author: Pieter Arntz| Date: Thu, 09 Jun 2022 12:41:02 +0000

After dragging their feet for months Owl Labs has released a patch for vulnerabilities that were publicly disclosed a week ago. The company denies the seriousness of the vulnerabilities.

The post Update now! Patch against vulnerabilities in Meeting Owl Pro and Whiteboard Owl devices appeared first on Malwarebytes Labs.

MalwareBytes Security

[updated]Unpatched Atlassian Confluence vulnerability is actively exploited

June 3, 2022 admin atlassian, behinder, China Chopper, cobalt strike, confluence, cve-2022-26134, Exploits and vulnerabilities, Meterpreter, Web Shell

Credit to Author: Pieter Arntz| Date: Fri, 03 Jun 2022 14:41:58 +0000

A vulnerability in Atlassian Confluence was found by performing an incident response investigation on a compromised server. The vulnerability is not yet patched.

The post [updated]Unpatched Atlassian Confluence vulnerability is actively exploited appeared first on Malwarebytes Labs.

MalwareBytes Security

Unpatched Atlassian Confluence vulnerability is actively exploited

June 3, 2022 admin atlassian, behinder, China Chopper, cobalt strike, confluence, cve-2022-26134, Exploits and vulnerabilities, Meterpreter, Web Shell

Credit to Author: Pieter Arntz| Date: Fri, 03 Jun 2022 14:41:58 +0000

A vulnerability in Atlassian Confluence was found by performing an incident response investigation on a compromised server. The vulnerability is not yet patched.

The post Unpatched Atlassian Confluence vulnerability is actively exploited appeared first on Malwarebytes Labs.

MalwareBytes Security

FAQ: Mitigating Microsoft Office’s ‘Follina’ zero-day

June 1, 2022 admin cve-2022-30190, Exploits and vulnerabilities, follina, Zero-Day

Credit to Author: Threat Intelligence Team| Date: Wed, 01 Jun 2022 16:36:44 +0000

FAQ for the new Follina zero-day vulnerability. What you can do to protect your computers right now.

The post FAQ: Mitigating Microsoft Office’s ‘Follina’ zero-day appeared first on Malwarebytes Labs.

MalwareBytes Security

[Updated]Microsoft Office zero-day “Follina”—it’s not a bug, it’s a feature! (It’s a bug)

May 31, 2022 admin cve-2022-30190, Exploits and vulnerabilities, follina, ms-msdt, preview pane, protected view, RTF

Credit to Author: Pieter Arntz| Date: Mon, 30 May 2022 18:09:26 +0000

Researchers around the world are working to understand a new remote code vulnerability in Microsoft Office dubbed Follina.

The post [Updated]Microsoft Office zero-day “Follina”—it’s not a bug, it’s a feature! (It’s a bug) appeared first on Malwarebytes Labs.

MalwareBytes Security

Microsoft Office zero-day “Follina”—it’s not a bug, it’s a feature! (It’s a bug)

May 30, 2022 admin Exploits and vulnerabilities, follina, ms-msdt, preview pane, protected view, RTF

Credit to Author: Pieter Arntz| Date: Mon, 30 May 2022 18:09:26 +0000

Researchers around the world are working to understand a new remote code vulnerability in Microsoft Office dubbed Follina.

The post Microsoft Office zero-day “Follina”—it’s not a bug, it’s a feature! (It’s a bug) appeared first on Malwarebytes Labs.