Critical WordPress-Plugin Bug Found in ‘Orbit Fox’ Allows Site Takeover
Two security vulnerabilities — one a privilege-escalation problem and the other a stored XSS bug — afflict a WordPress plugin with 40,000 installs.
[...]
critical
Adobe Fixes 7 Critical Flaws, Blocks Flash Player Content
Adobe issued patches for seven critical arbitrary-code-execution flaws plaguing Windows and MacOS users.
Source: Threat Post – Web Security – Adobe Fixes
[...]
Google Warns of Critical Android Remote Code Execution Bug
Google’s Android security update addressed 43 bugs overall affecting Android handsets, including Samsung phones.
Source: Threat Post – Mobile Security – Google
[...]
Critical Dell Wyse Bugs Let Attackers to Execute Code and Access Files and Credentials
The giant Dell Wyse is affected by two Critical Vulnerabilities CVE-2020-29491 and CVE-2020-29492 which targets thin client devices. The CyberMDX Research team has discovered
[...]
FBI Warns of DoppelPaymer Attacks on Critical Infrastructure
The operators behind DoppelPaymer have begun calling victims to pressure them into paying ransom, officials say.
Source: Dark Reading – Threat Intelligence
[...]
Firefox Patches Critical Mystery Bug, Also Impacting Google Chrome
Mozilla Foundation releases Firefox 84 browser, fixing several flaws and delivering performance gains and Apple processor support.
Source: Threat Post – Web
[...]
Critical Cisco Jabber Bug Gets Updated Fix
A series of bugs, patched in September, still allow remote code execution by attackers.
Source: Threat Post – Web Security – Critical
[...]
Google Patches Critical Wi-Fi and Audio Bugs in Android Handsets
Google updates its mobile OS, fixing ten critical bugs, including one remote code execution flaw.
Source: Threat Post – Mobile Security –
[...]
Critical Flaws in Millions of IoT Devices May Never Get Fixed
Amnesia:33 is the latest in a long line of vulnerabilities that affect countless embedded devices.
Source: Wired – Critical Flaws in Millions
[...]
Critical Oracle WebLogic Vulnerability Flaw Actively Exploited by DarkIRC Malware
Juniper Threat Labs researchers observed active attacks on Oracle WebLogic software using CVE-2020-14882. This vulnerability, if successfully exploited, allows unauthenticated remote code execution.
[...]