Category: alerts

Original release date: September 3, 2021 On August 25, 2021, Atlassian released security updates to address a remote code execution vulnerability (CVE-2021-26084) affecting Confluence Server and Data Center. Recently, CVE-2021-26084 has been detected in exploits in the wild. A remote attacker could exploit this vulnerability to take control of an affected system. CISA urges users… Read more

The BrakTooth set of security vulnerabilities impacts at least 11 vendors’ chipsets. Read more

Original release date: September 2, 2021 Cisco has released security updates to address a critical vulnerability affecting Cisco Enterprise Network Function Virtualization Infrastructure Software (NFVIS) Release 4.5.1. A remote attacker could exploit this vulnerability to take control of an affected system. For updates addressing lower severity vulnerabilities, see the Cisco Security Advisories page. CISA encourages… Read more

A design flaw involving Google Timeline could allow someone to track another device without installing a stalkerware app. Read more

There’s proof-of-concept code out for the near-maximum critical – rated at 9.8 – authentication bypass bug, but Cisco hasn’t seen any malicious exploit yet. Read more

Users should be careful whose pics they view and should, of course, update their apps. Read more

IoT vulnerabilities turn remote into listening device, researchers find, which impacted 18 million Xfinity customers. Read more

Two vulnerabilities in the site-building plugin could be useful tools in the hands of a skilled attacker, researchers warned. Read more

Services that let consumers resell their bandwidth for money are ripe for abuse, researchers warn. Read more

A pair of unpatched security vulnerabilities can allow unauthenticated cyberattackers to turn off window, door and motion-sensor monitoring. Read more