Remove 10
article thumbnail

Patch Tuesday, October 2023 Edition

Krebs on Security

The patch fixes CVE-2023-42724 , which attackers have been using in targeted attacks to elevate their access on a local device. Apple said it also patched CVE-2023-5217 , which is not listed as a zero-day bug. ” Microsoft also patched zero-day bugs in Skype for Business ( CVE-2023-41763 ) and Wordpad ( CVE-2023-36563 ).

Libraries 230
article thumbnail

Microsoft Patch Tuesday, June 2023 Edition

Krebs on Security

” Top of the list on that front is CVE-2023-29357 , which is a “critical” bug in Microsoft SharePoint Server that can be exploited by an unauthenticated attacker on the same network. This SharePoint flaw earned a CVSS rating of 9.8 is the most dangerous).

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Apple & Microsoft Patch Tuesday, July 2023 Edition

Krebs on Security

On July 10, Apple pushed a “Rapid Security Response” update to fix a code execution flaw in the Webkit browser component built into iOS, iPadOS, and macOS Ventura. CVE-2023-32046 affects a core Windows component called MSHTML, which is used by Windows and other applications, like Office , Outlook and Skype.

article thumbnail

Pwn2Own Vancouver 2023 Day 2: Microsoft Teams, Oracle VirtualBox, and Tesla hacked

Security Affairs

On the second day of Pwn2Own Vancouver 2023, the organization awarded $475,000 for 10 unique zero-day vulnerabilities. On the second day of Pwn2Own Vancouver 2023, the organization awarded $475,000 for 10 unique zero-day vulnerabilities, bringing the total awarded to $850,000! They earn $30,000 and 3 Master of Pwn points.

article thumbnail

51 Must-Know Phishing Statistics for 2023

IT Governance

We’ve looked at sources such as IBM’s Cost of a Data Breach Report , Verizon’s 2023 DBIR (Data Breaches and Investigations Report) and Proofpoint’s The State of Phishing report , and found 50 essential stats to reveal the threat that phishing plays – plus we have an extra statistic to explain how you can prevent attacks.

Phishing 111
article thumbnail

CyberheistNews Vol 13 #20 [Foot in the Door] The Q1 2023's Top-Clicked Phishing Scams | INFOGRAPHIC

KnowBe4

CyberheistNews Vol 13 #20 | May 16th, 2023 [Foot in the Door] The Q1 2023's Top-Clicked Phishing Scams | INFOGRAPHIC KnowBe4's latest reports on top-clicked phishing email subjects have been released for Q1 2023. But seldom have we been able to combine the two and present the state of cyber attacks from an insurer's perspective.

article thumbnail

VulnRecap 1/29/24 – Apple, Apache & VMware Under Attack

eSecurity Planet

The problem: Mandiant revealed possible 2021 exploitation by Chinese espionage attackers for CVE-2023-34048, an out-of-bounds weakness in protocol implementation first publicly reported in October 2023. The fix: Deploy the Apache security upgrades available since November 2023.