SecureTeam

Adobe ColdFusion Attack Chain Actively Exploited

Adobe ColdFusion vulnerabilities are being actively exploited by attackers to bypass authentication and execute remote commands to create a webshell on the vulnerable endpoint. ColdFusion is an Adobe product for web developers providing cloud based coding environments to build apps. Researchers at Rapid7 discovered an improper access control vulnerability in Adobe ColdFusion 2018, 2021, and […]

Adobe ColdFusion Attack Chain Actively Exploited Read More »

Adobe ColdFusion Vulnerability Actively Exploited

News, Vulnerabilities / Ian Reynolds

A critical arbitrary code execution vulnerability is being actively exploited in unpatched Adobe ColdFusion versions 2018 and 2021. A security bulletin was released by Adobe to inform users of this actively exploited vulnerability, along with two other vulnerabilities patched in the same update, a critical severity deserialisation flaw and a memory leak path traversal vulnerability.

Adobe ColdFusion Vulnerability Actively Exploited Read More »

TrojanOrder Attacks Target Online Retailers

News, Vulnerabilities / Ian Reynolds

A critical vulnerability is being exploited in Magento 2 and Adobe Commerce sites for online retailers. Attackers are sending trojan orders to the target website and are hiding their attacks by using the increase in online purchases around the time of Black Friday and Cyber Monday sales, and in the holiday shopping period in general.

TrojanOrder Attacks Target Online Retailers Read More »

Adobe Magento Vulnerability Exploited in Attacks

News, Vulnerabilities / Ian Reynolds

Adobe Commerce and Magento Open Source have been targeted in a recent wave of attacks that exploit a critical vulnerability. Threat researchers at Sansec released a report this week that details the methodology of this remote access trojan attack. The vulnerability exploited in these attacks, CVE-2022-24086, was found to be actively exploited as early as

Adobe Magento Vulnerability Exploited in Attacks Read More »

CISA Warn of 40 New Actively Exploited Cybersecurity Vulnerabilities This Month So Far

Articles, Information Assurance / Ian Reynolds

Last week saw the addition of 39 known exploited cybersecurity vulnerabilities to the CISA catalogue, bringing the total added in June so far to 40. The Cybersecurity and Infrastructure Security Agency (CISA), a branch of the US government, released an alert on Wednesday, to make people aware of the threats posed by these vulnerabilities, which

CISA Warn of 40 New Actively Exploited Cybersecurity Vulnerabilities This Month So Far Read More »

Critical Magento patch for Remote Code Exploit

News, Vulnerabilities / Ian Reynolds

Adobe has released a patch for a critical Remote Code Execution vulnerability that affects the Magento and Adobe Commerce eCommerce platforms. The CVSS 9.8 critical rated vulnerability (CVE-2022-24086) has, according to Adobe, been observed to be exploited in the wild and threat actors can use it to achieve arbitrary code execution on the target e-commerce

Critical Magento patch for Remote Code Exploit Read More »

June Patch Tuesday and Vulnerability Roundup

News, Vulnerabilities / Ian Reynolds

The June security updates include 7 zero-day exploits fixed in Microsoft code, 5 high-severity bugs in Intel BIOS firmware and Security Library, and 21 critical vulnerabilities fixed in Adobe products. Microsoft Updates The June 2021 security updates from Microsoft resolves 7 zero-day vulnerabilities- six of them known to be exploited in the wild – and

June Patch Tuesday and Vulnerability Roundup Read More »

Microsoft and Adobe release patches for zero day vulnerabilities

News, Vulnerabilities / Ian Reynolds

May Patch Tuesday sees four critical vulnerabilities patched by Microsoft and Adobe ships a fix for an Acrobat Reader zero-day that is under attack in the wild. Microsoft Patch Tuesday May 2021 55 vulnerabilities, 4 critical, are resolved in the May security patch bundle from Microsoft. Of particular note are: CVE-2021-31166 which is a Windows

Microsoft and Adobe release patches for zero day vulnerabilities Read More »

Adobe issues Acrobat security patches

News, Vulnerabilities / Ian Reynolds

Adobe has issued patches for critical vulnerabilities in their Acrobat and Acrobat Reader software widely used for creating and reading PDF documents. 12 fixes are included in the latest security updates, three are rated as Critical as they can be exploited to achieve arbitrary code execution. In other words, this means simply opening a specially

Adobe issues Acrobat security patches Read More »

Adobe

Adobe ColdFusion Attack Chain Actively Exploited

Adobe ColdFusion Vulnerability Actively Exploited

TrojanOrder Attacks Target Online Retailers

Adobe Magento Vulnerability Exploited in Attacks

CISA Warn of 40 New Actively Exploited Cybersecurity Vulnerabilities This Month So Far

Critical Magento patch for Remote Code Exploit

June Patch Tuesday and Vulnerability Roundup

Microsoft and Adobe release patches for zero day vulnerabilities

Adobe issues Acrobat security patches

Our Address

Talk to us

Office Hours

Company Number

VAT Registration Number

Penetration Testing

Risk & Compliance Services

Quick Links

information. secured.

Head Office Address

Opening Hours

Stay in Touch