3 SSL VPN vulnerabilities disclosed in 2019 are still routinely exploited:

wired.co.uk/article/apple-ios-google-chrome-android-security-patches-august-2022

Credibility C+

Aug 31 22

Apple's iOS and Google Chrome Updates Fix Serious Security Flaws: Plus: Microsoft patches over 100 vulnerabilities, Android gets a significant patch, and more.

theregister.com/2022/06/21/56_vulnerabilities_critical_industrial/

dlvr.it Jun 21 22

CISA and friends raise alarm on critical flaws in industrial equipment, infrastructure

pcmag.com/news/flaw-in-audio-format-exposed-millions-of-android-phones-to-remote-hacking

pcmag.com

May 23 22

Flaw in Audio Format Exposed Millions of Android Phones to Remote Hacking: Google rolled out patches for the flaws in a December security update ...

7 similar articles

wired.com/story/ios-android-chrome-updates-april-2022/

Apr 29 22

Apple iOS, Android, and Google Chrome Issued Critical Updates in April: Plus: Microsoft patched some 100 flaws, while Oracle issued more than 500 security fixes.

pcmag.com/news/google-patches-third-actively-exploited-chrome-zero-day-of-2022

pcmag.com

Apr 17 22

Google Patches Third Actively Exploited Chrome Zero-Day of 2022: New versions of Edge and Vivaldi have also been released.

arstechnica.com/information-technology/2022/04/watchguard-failed-to-disclose-critical-flaw-exploited-by-russian-hackers/

Apr 09 22

WatchGuard Didn't Explicitly Disclose a Flaw Exploited by Hackers: The security vendor kept a critical vulnerability in its firewall appliances quiet even as it ...

TechSpot

techspot.com/news/93886-third-party-security-group-patches-windows-vulnerability-microsoft.html

Mar 22 22

Third party security group patches a Windows vulnerability Microsoft couldn't, yet again

theregister.com/2022/03/01/socket_npm_dependency_scanner/

dlvr.it Mar 01 22

This JavaScript scanner hunts down malware in libraries: Stick a fork in this Socket and zap malicious NPM packages

venturebeat.com/2021/12/29/patching-log4j-to-version-2-17-1-can-probably-wait/

VentureBeat

Dec 30 21

Patching Log4j to version 2.17.1 can probably wait: The latest patch for Apache Log4j, version 2.17.1, shouldn't be rushed for most organizations as the ...

pcmag.com/news/150-plus-hp-printers-vulnerable-to-bugs-that-could-allow-full-control

pcmag.com

Dec 29 21

150+ HP Printers Vulnerable to Bugs That Could Allow 'Full Control': HP released patches to address the security flaws on Nov. 1. Is your printer on the list?

zdnet.com/article/fbi-hackers-are-actively-exploiting-this-flaw-on-manageengine-desktop-central-servers/

Dec 21 21

FBI: Hackers are actively exploiting this flaw on ManageEngine Desktop Central servers

zdnet.com/article/second-log4j-vulnerability-found-apache-log4j-2-16-0-released/

Dec 18 21

Second Log4j vulnerability discovered, patch already released: Apparently, the patch for the first vulnerability was "incomplete."

venturebeat.com/2021/07/12/with-kaseya-patch-it-teams-begin-the-long-slog-to-recovery/

VentureBeat

Jul 17 21

With Kaseya patch, IT teams begin the long slog to recovery: With the Kaseya patch, runbook, and hardening instructions available, IT teams can get started on ...

arstechnica.com/gadgets/2021/07/solarwinds-hackers-used-an-ios-0-day-to-steal-google-and-microsoft-credentials/

Jul 16 21

The SolarWinds Hackers Used an iOS Flaw to Compromise iPhones: Security researchers say the group exploited a zero-day in Apple’s operating system to target ...

zdnet.com/article/popular-remote-student-learning-program-found-to-be-riddled-with-security-holes/

Mar 27 21

Popular remote lesson monitoring program could be exploited to attack student PCs

arstechnica.com/gadgets/2021/03/to-security-pros-dread-another-critical-server-vulnerability-is-under-exploit/

Ars Technica

Mar 24 21

Hackers are exploiting a server vulnerability with a severity of 9.8 out of 10: As if the mass-exploitation of Exchange servers wasn't enough ...

CNN.com

cnn.com/2021/03/10/tech/microsoft-exchange-hafnium-hack-explainer/

Mar 10 21

Here's what we know so far about the massive Microsoft Exchange hack: A large, Chinese-linked hack of Microsoft's Exchange email service continues to ...

14 similar articles

zdnet.com/article/chinese-hackers-cloned-attack-tools-belonging-to-nsas-equation-group/

Feb 27 21

Chinese hackers cloned attack tool belonging to NSA’s Equation Group: Updated: The Jian tool was used to exploit a Windows zero-day vulnerability years before a ...

zdnet.com/article/10-years-old-sudo-bug-lets-linux-users-gain-root-level-access/

Jan 31 21

10-year-old Sudo bug lets Linux users gain root-level access: The vulnerability, named "Baron Samedit," impacts most Linux distributions today.

zdnet.com/article/google-reveals-sophisticated-windows-android-hacking-operation/

Jan 16 21

Google reveals sophisticated Windows and Android hacking operation: The attackers used a combination of Android, Chrome, and Windows vulnerabilities ...