Google has released Chrome 91.0.4472.164 for Windows, Mac, and Linux to fix seven security vulnerabilities, one of them a high severity zero-day vulnerability exploited in the wild. “Google is aware of reports that an exploit for CVE-2021-30563 exists in the wild,” the company revealed. The new …
Apple supports two predecessor systems alongside the current version of macOS, and an important security update for macOS 10.14 (Mojave) and 10.15 (Catalina) was rolled out at the same time as yesterday’s Big Sur 11.2 update. The update in question is called Security Update 2021-001 for …
Unless you have an Extended Security Update contract most Windows 7 users are no longer receiving patches from Microsoft. Unfortunately, nearly 1 in 4 Windows users are still running Windows 7, and a recently discovered local privilege escalation vulnerability (which also affects Windows Server 2008 R) …
Google’s Project Zero is very quick to point out security flaws in other company’s products, but the search giant is far from being perfect itself. Two recently discovered zero-day vulnerabilities in Chrome have just been fixed with a new patch. CVE-2020-16009 and CVE-2020-16010 are remote code-execution …
The U.S Computer Emergency Readiness Team (US-CERT) revealed about an existing vulnerability in Microsoft’s Windows Operating Systems including Windows 10 that may allow a remote, unauthenticated attacker to gain access to the Windows system. The CERT team discovered a zero-day vulnerability in the Server Message …
SandboxEscaper is back with a new Privilege Escalation Exploit. On this occasion, she defeated a patch which Microsoft released in April for CVE-2019-0841, and as usual, released the exploit with proof-of-concept exploit code. Thankfully the exploit requires code running on a local machine, vs a remote …
Apple paid out $75,000 to a hacker for identifying multiple zero-day vulnerabilities in its software, some of which could be used to hijack the camera on a MacBook or an iPhone, according to Forbes. A zero-day vulnerability refers to a security hole in software that is …
