security update

Critical Atlassian Confluence zero-day exploited by attackers (CVE-2023-22515)

October 5, 2023

Atlassian has fixed a critical zero-day vulnerability (CVE-2023-22515) in Confluence Data Center and Server that is being exploited in the wild. “Atlassian has been made …

Qualcomm patches 3 actively exploited zero-days

October 4, 2023

Qualcomm has fixed three actively exploited vulnerabilities (CVE-2023-33106, CVE-2023-33107, CVE-2023-33063) in its Adreno GPU and Compute DSP drivers. Vulnerabilities …

Zero-day in Arm GPU drivers exploited in targeted attacks (CVE-2023-4211)

October 3, 2023

A vulnerability (CVE-2023-4211) in the kernel drivers for several Mali GPUs “may be under limited, targeted exploitation,” British semiconductor manufacturer Arm …

Critical zero-days in Exim revealed, only 3 have been fixed

October 2, 2023

Six zero-days in Exim, the most widely used mail transfer agent (MTA), have been revealed by Trend Micro’s Zero Day Initiative (ZDI) last Wednesday. Due to what seems to …

Critical vulnerability in WS_FTP Server exploited by attackers (CVE-2023-40044)

October 2, 2023

Progress Software, the company behind the recently hacked MOVEit file-sharing tool, has recently fixed two critical vulnerabilities (CVE-2023-40044, CVE-2023-42657) in WS_FTP …

Yet another Chrome zero-day exploited in the wild! (CVE-2023-5217)

September 28, 2023

Google has fixed another critical zero-day vulnerability (CVE-2023-5217) in Chrome that is being exploited in the wild. About CVE-2023-5217 The vulnerability is caused by a …

GitLab fixes critical vulnerability, patch now! (CVE-2023-5009)

September 22, 2023

GitLab has fixed a critical vulnerability (CVE-2023-5009) in the Enterprise Edition (EE) and Community Edition (CE) of its widely used DevOps platform. The flaw may allow a …

Apple fixes 3 zero-day vulnerabilities exploited to compromise iPhones

September 22, 2023

Apple has released updates for iOS and iPadOS, macOS, watchOS, and Safari to fix three zero-day vulnerabilities (CVE-2023-41992, CVE-2023-41991, CVE-2023-41993) exploited …

Critical Trend Micro vulnerability exploited in the wild (CVE-2023-41179)

September 21, 2023

Trend Micro has fixed a critical zero-day vulnerability (CVE-2023-41179) in several of its endpoint security products for enterprises that has been spotted being exploited in …

Kubernetes vulnerability allows RCE on Windows endpoints (CVE-2023-3676)

September 18, 2023

Three high-severity Kubernetes vulnerabilities (CVE-2023-3676, CVE-2023-3893, CVE-2023-3955) could allow attackers to execute code remotely and gain control over all Windows …

Microsoft, Adobe fix zero-days exploited by attackers (CVE-2023-26369, CVE-2023-36761, CVE-2023-36802)

September 12, 2023

September 2023 Patch Tuesday is here, with fixes for actively exploited vulnerabilities in Adobe Acrobat and Reader (CVE-2023-26369), Microsoft Word (CVE-2023-36761), and …

Chrome zero-day exploited in the wild, patch now! (CVE-2023-4863)