Security Intelligence
Threat actors exploit critical vulnerabilities in Google Chrome and Chromium-based web browsers
On 25 March 2022, Google released Chrome 99.0.4844.84 for Windows, Mac, and Linux to address a flaw that is being...
Security Intelligence
Security incident affecting Okta subcontractor
On 22 March 2022, identity and access management company Okta published a blog on a security incident affecting a third...
Security Intelligence
SAP updates address critical vulnerabilities [2022]
On 8 February 2022, SAP released 19 security notes to address multiple vulnerabilities. Nine of these are marked as...
Security Intelligence
Researcher publishes details on Xerox vulnerability
On 24 January 2022, a researcher published a proof-of-concept (POC) implementation for a critical vulnerability...
Security Intelligence
Vulnerabilities in Log4j – continued
This is an update to our blog post on 21 December 2021 covering Log4j vulnerabilities. Since then, Apache Log4j2 has...
Security Intelligence
Oracle critical patch update addresses 497 flaws
On 19 January 2022, Oracle issued a Critical Patch Update fixing 497 vulnerabilities; many of these can be used for...
Security Intelligence
Microsoft’s January 2022 Patch Tuesday fixes 122 flaws
On 11 January 2022, Microsoft released updates to address 122 vulnerabilities; nine classified as critical and six...
Security Intelligence
Vulnerabilities in Java-based logging utility Log4j
This week brings more updates to the issues covered in our previous blogs describing vulnerabilities in Log4j, a...
Security Intelligence
Vulnerabilities in logging frameworks for Java applications
Since our last blog on a flaw in Apache Log4j, Apache has released Log4j version 2.16.0 which provides further fixes in...
Security Intelligence
Threat actors scanning for critical vulnerability in Apache Log4j
There have been several notable updates since this blog was published. Please see part 2 of the blog which includes...
Security Intelligence
BigSig vulnerability in NSS library affects multiple applications
Researchers published details on a critical vulnerability affecting Network Security Services (NSS), a set of...
Security Intelligence
Actively exploited vulnerabilities in Zoho ManageEngine products
From 2-3 December 2021, advisories were issued on threat actors taking advantage of two critical vulnerabilities in...