vulnerabilities
Google researchers say use after free vulnerability could allow attackers to escalate privileges on Android devices.
CISA warns of "unspecified vulnerability involving an unspecified third-party component."
But details of campaign blasted by one industry veteran for giving away too much detail on web shells on victims' systems
Redmond pushes fixes for 117 vulnerabilities, three rated critical, five as publicly known , and eight marked as “exploitation more likely.” Beyond Microsoft, there are...
“We have been working on fixes for the last three weeks and hope to have them available soon. We are removing support for the old CUPS browse protocol completely”
Some 300,000 endpoints may be publicly exposed to RCE, but these are likely to be largely desktops not servers.
An attacker would need to craft a malicious container and run it "either directly (for example in services allowing shared GPU resources) or indirectly through a supply chain or social engineering attack"
Still a hit with hackers after all these months