Warnings

Mozilla has released security updates to address vulnerabilities in Firefox and Thunderbird. A cyber threat actor could exploit some of these vulnerabilities to take control of an affected system.

Apple has released security updates to address vulnerabilities in Safari, iOS, iPadOS, and macOS Sonoma. A cyber threat actor could exploit one of these vulnerabilities to obtain sensitive information.

Атаката Terrapin е нова криптографска атака, насочена към целостта на SSH протокола, първата практическа атака от този вид и една от малкото атаки срещу SSH изобщо. Атаката използва слабости в спецификацията на SSH, съчетана с широко разпространени алгоритми (ChaCha20-Poly1305 и CBC-EtM). На практика атаката може да се използва за възпрепятстване на договарянето на определени разширения … Read more

FortiGuard has released security updates to address vulnerabilities in multiple FortiGuard products. A cyber threat actor could exploit some of these vulnerabilities to take control of an affected system. Read more

The Apache Software Foundation has released security updates to address a vulnerability (CVE-2023-50164) in Struts 2. A remote attacker could exploit this vulnerability to take control of an affected system.

Adobe has released security updates to address multiple vulnerabilities in Adobe software. A cyber threat actor could exploit some of these vulnerabilities to take control of an affected system. Read more

Microsoft has released security updates to address vulnerabilities in multiple products. A cyber threat actor could exploit some of these vulnerabilities to take control of an affected system.

Apple has released security updates for Safari, iOS and iPadOS, Sonoma, Ventura, and Monterey to address multiple vulnerabilities. A cyber threat actor could exploit one of these vulnerabilities to take control of an affected system. Read more

От средата на миналия месец се наблюдават атаки към правителствени организации от цял свят, които използват уязвимост в WinRAR версии до 6.23. Уязвимостта (CVE-2023-38831) е в имплементирането на ShellExecute в WinRAR. Изразява се в подправяне на архив по начин, който да съдържа файл с разширение, завършващо с интервали и директория със същото име, а в … Read more

Apple has released security updates to address vulnerabilities within Safari, macOS Sonoma, iOS, and iPadOS. A cyber threat actor could exploit one of these vulnerabilities to take control of an affected system. Read more