Apple Releases Updates to Address Zero-Day Flaws in iOS, iPadOS, macOS, and Safari

Apple on Friday released security updates for iOS, iPadOS, macOS, and Safari web browser to address a pair of zero-day flaws that are being exploited in the wild. The two vulnerabilities are as follows - CVE-2023-28205 - A use after free issue in WebKit that could lead to arbitrary code execution...

macOS 13.x < 13.3.1 Multiple Vulnerabilities (HT213721)

The remote host is running a version of macOS / Mac OS X that is 13.x prior to 13.3.1. It is, therefore, affected by multiple vulnerabilities: - An app may be able to execute arbitrary code with kernel privileges. Apple is aware of a report that this issue may have been actively exploited...

About the security content of Safari 16.4.1

About the security content of Safari 16.4.1 This document describes the security content of Safari 16.4.1. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are...

CVE-2023-0580

Insecure Storage of Sensitive Information vulnerability in ABB My Control System on-premise allows an attacker who successfully exploited this vulnerability to gain access to the secure application data or take control of the application. Of the services that make up the My Control System...

CVE-2023-0905

creationtimestamp| type| source ---|---|--- 2023-04-06 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/51285...

CVE-2023-23156

creationtimestamp| type| source ---|---|--- 2023-04-06 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/51272...

CVE-2023-0912

creationtimestamp| type| source ---|---|--- 2023-04-06 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/51282...

CVE-2023-0902

creationtimestamp| type| source ---|---|--- 2023-04-06 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/51287 2023-04-06 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/51292...

CVE-2023-0904

creationtimestamp| type| source ---|---|--- 2023-04-06 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/51286...

CVE-2023-20073

creationtimestamp| type| source ---|---|--- 2023-04-05 20:26:37+00:00| seen| https://t.me/cibsecurity/61484 2023-08-19 14:06:35+00:00| published-proof-of-concept| https://t.me/proxybar/1687 2023-08-20 02:49:35+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/4948 2023-08-20...

Update Android now! Google patches three important vulnerabilities

In the April 2023 Android security bulletin, Google announced security updates which include fixes for two critical remote code execution RCE vulnerabilities and one vulnerability that has been exploited in the wild. The vulnerabilities are impacting Android systems running versions 11, 12, 12L,...

CVE-2023-0493

creationtimestamp| type| source ---|---|--- 2023-04-05 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/51254 2023-12-11 00:57:29+00:00| seen| https://t.me/arpsyndicate/1683 2025-03-31 17:31:04+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/9712...

CVE-2023-1671

creationtimestamp| type| source ---|---|--- 2023-04-04 14:36:57+00:00| seen| https://t.me/cibsecurity/61374 2023-04-05 15:15:02+00:00| seen| https://t.me/truesecator/4254 2023-04-24 04:35:31+00:00| published-proof-of-concept| https://t.me/CNArsenal/525 2023-04-25 09:47:32+00:00|...

Actors, Threats and Vulnerabilities 27 March to 2 April 2023

For a detailed threat digest, download the pdf file here Summary For a detailed threat digest, download the pdf file here HiveForce Labs recently made several significant discoveries related to cybersecurity threats. Over the past week, they identified a total of Nine attacks that were executed...

CISA Known Exploited Vulnerability Catalog March 2023

For a detailed CISAs KEV Catalog, download the pdf file here Summary For a detailed CISAs KEV Catalog, download the pdf file here The Known Exploited Vulnerability KEV catalog, maintained by CISA, is the authoritative source of vulnerabilities that have been exploited in the wild. To be included ...

CVE-2023-23162

creationtimestamp| type| source ---|---|--- 2023-04-03 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/51215...

CVE-2023-23161

creationtimestamp| type| source ---|---|--- 2023-04-03 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/51214...

CVE-2023-23163

creationtimestamp| type| source ---|---|--- 2023-04-03 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/51216...

Zimbra email platform vulnerability exploited to steal European govt emails

By Deeba Ahmed Researchers have noted that attackers are targeting a medium-severity Zimbra vulnerability that the company patched in version 9.0.0 Patch 24, one year ago. This is a post from HackRead.com Read the original post: Zimbra email platform vulnerability exploited to steal European govt...

CVE-2023-27159

creationtimestamp| type| source ---|---|--- 2023-03-31 22:22:25+00:00| seen| https://t.me/cibsecurity/61274 2025-03-09 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities - 2025-03-09 2026-06-23 14:06:13+00:00| exploited|...