The Latest in IT Security

Posts Tagged ‘zero day’

A zero-day vulnerability in FortiOS SSL-VPN that Fortinet addressed last month was exploited by unknown actors in attacks targeting the government and other large organizations. “The complexity of the exploit suggests an advanced actor and that it is highly targeted at governmental or government-related targets,” Fortinet researchers said in a post-mortem analysis published this week. […]

Read more ...

The flaws, tracked as CVE-2021-25337, CVE-2021-25369 and CVE-2021-25370, have been chained and exploited against Android phones, but they impact custom Samsung components. The security holes have been described as an arbitrary file read/write issue via a custom clipboard content provider, a kernel information leak, and a use-after-free in the display processing unit driver. Read More

Read more ...

Microsoft’s final Patch Tuesday finally plugs a zero-day exploit after months of warnings from security researchers about a vulnerability that allows hackers to take control of Windows machines via a word processor. The operating system giant earlier this year said it will be moving to rolling, automatic updates rather than focusing on the second Tuesday […]

Read more ...


Categories

SATURDAY, JANUARY 28, 2023
WHITE PAPERS

Mission-Critical Broadband – Why Governments Should Partner with Commercial Operators:
Many governments embrace mobile network operator (MNO) networks as ...

ARA at Scale: How to Choose a Solution That Grows With Your Needs:
Application release automation (ARA) tools enable best practices in...

The Multi-Model Database:
Part of the “new normal” where data and cloud applications are ...

Featured

Archives

Latest Comments