Microsoft’s November Patch Tuesday addresses 62 vulnerabilities, nine of which are critical. Six of the vulnerabilities are actively exploited zero-days, which includes two used in ProxyNotShell attacks (CVE-2022-41082 and CVE-2022-41040)…
Security researchers at Malwarebytes have published a report on a group of malicious apps found on the Google Play store, which has collectively amassed over one million downloads. The…
Description: OpenSSL has released a security advisory detailing two new high-severity vulnerabilities (CVE-2022-3602 and CVE-2022-3786) affecting versions 3.0.0 to 3.0.6. CVE-2022-3786 allows an attacker to use a specially crafted…
Affected Systems: Cisco AnyConnect Secure Mobility Client for Windows – Releases earlier than 4.9.00086. Description: Cisco has warned customers using the Cisco AnyConnect Secure Mobility…
Affected Systems: VMware Workspace ONE Access and Identity Manager Security researchers at Fortinet have released an article on a new form of malware seen exploiting a critical…
Microsoft has announced that a misconfigured Microsoft endpoint has resulted in the potential for unauthenticated access to business transaction data between Microsoft and its customers. The leaked…
Logging in has been a critical part of owning an account since the birth of the internet. Most people do it multiple times daily, many…
It is a common misconception that cyber security is an area for IT managers and network admins to focus on. Many organisations that outsource their…
Affected Systems: FortiOS versions 7.2.1, 7.2.0, 7.0.6, 7.0.5, 7.0.4, 7.0.3, 7.0.2, 7.0.1, and 7.0.0 FortiProxy versions 7.2.0, 7.0.6, 7.0.5, 7.0.4, 7.0.3, 7.0.2, 7.0.1, and 7.0.0…