SecureTeam

CISA Warn of 40 New Actively Exploited Cybersecurity Vulnerabilities This Month So Far

Articles, Information Assurance / Ian Reynolds

Last week saw the addition of 39 known exploited cybersecurity vulnerabilities to the CISA catalogue, bringing the total added in June so far to 40. The Cybersecurity and Infrastructure Security Agency (CISA), a branch of the US government, released an alert on Wednesday, to make people aware of the threats posed by these vulnerabilities, which […]

CISA Warn of 40 New Actively Exploited Cybersecurity Vulnerabilities This Month So Far Read More »

Critical Atlassian Confluence Vulnerability Exploited

News, Vulnerabilities / Ian Reynolds

Atlassian are warning customers of a critical remote code execution vulnerability in their Confluence collaboration server which affects on-premises installations of Confluence Server and Data Center editions. Tracked as CVE-2022-26134, the flaw was identified by Volexity at the start of this month and it impacts Confluence Server 7.18.0 and Confluence Server and Data Center 7.4.0.

Critical Atlassian Confluence Vulnerability Exploited Read More »

New Shellcode Malware SVCReady in Microsoft Office

News, Vulnerabilities / Ian Reynolds

New malware known as SVCReady uses shellcode in the properties of Microsoft Office documents to infect its target. This is yet another new form of attack that affects Microsoft Office, disguising malicious code in a seemingly safe Office document format. The SVCReady family of malware has been reported by the HP threat research blog as

New Shellcode Malware SVCReady in Microsoft Office Read More »

Android Patches 5 Critical Vulnerabilities

News, Vulnerabilities / Ian Reynolds

An update for devices running Android versions 10, 11 and 12 has been released as two security patch levels: 2022-06-01 and 2022-06-05. Across these updates over 40 vulnerabilities have been identified and patched, 5 of which have been given a severity rating of ‘Critical’ by the Android security team. This separation into two security patch

Android Patches 5 Critical Vulnerabilities Read More »

Microsoft Office Zero-Day attack identified

News, Uncategorized, Vulnerabilities / Ian Reynolds

A new vulnerability has been discovered that can allow a malicious document to run arbitrary code on a Windows computer. Although the obvious attack vector is MS Office documents, Microsoft is describing this as a Windows Operating System vulnerability according to CVE-2022-30190. A Word Document was found to be able to abuse the Microsoft Windows

Microsoft Office Zero-Day attack identified Read More »

Microsoft warns of Kerberos Relay attacks

News, Vulnerabilities / Ian Reynolds

Microsoft has issued several updates to help Systems Admins protect their networks against Kerberos Relay attacks. Microsoft have said no security patch will be provided to mitigate this attack vector, so config changes must be made to default Windows Domain Controller on premise installations. Microsoft explains the vulnerability in a recent blog post: Detecting and

Microsoft warns of Kerberos Relay attacks Read More »

Google Chrome security update

News, Vulnerabilities / Ian Reynolds

Google has issued a new version of the Chrome browser to resolve a number of serious security issues. Several vulnerabilities have been discovered and fixed in the latest release of Google Chrome, including one rated as Critical which could allow arbitrary code execution on the victim’s system. CVE-2022-1853 is a use after free vulnerability in

Google Chrome security update Read More »

10 Common Security Weaknesses and How To Defend Against Them

Articles, Information Assurance / Ian Reynolds

The mistakes we make and how to fix them – a new report co-authored by the NCSC reveals the 10 most common security weaknesses exploited by hackers. A joint security alert from the National Cyber Security Centre UK (NCSC-UK) was released earlier this month, co-authored by cybersecurity bodies from the USA, Canada, New Zealand, and

10 Common Security Weaknesses and How To Defend Against Them Read More »

Apple patches zero-day vulnerability

News, Vulnerabilities / Ian Reynolds

Apple have released eight security updates this week for a range of devices. Four of these updates include fixes for a zero-day vulnerability in AppleAVD. This vulnerability is said to have been actively exploited before this update was released, and affected Apple Watch, Apple TV, Macs, iPhones and iPads. Identified as CVE-2022-22675 by an anonymous

Apple patches zero-day vulnerability Read More »

Microsoft patches critical zero-day

News, Vulnerabilities / Ian Reynolds

Critical remote code execution and elevation of privilege vulnerabilities were among the 75 total vulnerabilities that have been fixed in Microsoft’s May Patch Tuesday this week. These essential patches include fixes for currently exploited zero-day vulnerabilities, one of which is a novel NTLM relay attack, identified as CVE-2022-26925, which affects all versions of Windows. This

Microsoft patches critical zero-day Read More »

vulnerability management

CISA Warn of 40 New Actively Exploited Cybersecurity Vulnerabilities This Month So Far

Critical Atlassian Confluence Vulnerability Exploited

New Shellcode Malware SVCReady in Microsoft Office

Android Patches 5 Critical Vulnerabilities

Microsoft Office Zero-Day attack identified

Microsoft warns of Kerberos Relay attacks

Google Chrome security update

10 Common Security Weaknesses and How To Defend Against Them

Apple patches zero-day vulnerability

Microsoft patches critical zero-day

Our Address

Talk to us

Office Hours

Company Number

VAT Registration Number

Penetration Testing

Risk & Compliance Services

Quick Links

information. secured.

Head Office Address

Opening Hours

Stay in Touch