Template:PSW673NewsTylerRobinson

Articles

1. 3 actively exploited 0-days on Apple iOS, so patch now/soon! Apple has patched iOS against three zero-day vulnerabilities that attackers were actively exploiting in the wild. The attacks were discovered by Google’s Project Zero vulnerability research group, which over the past few weeks has detected four other zero-day exploits—three against Chrome and a third against Windows. The security flaws affect iPhone 6s and later, seventh-generation iPod touches, iPad Air 2s and later, and iPad mini 4s and later. The flaws are: CVE-2020-27930, a code-execution vulnerability that attackers can trigger using maliciously crafted fonts CVE-2020-27950, which allows a malicious app to obtain the locations in kernel memory, and CVE-2020-27932, a bug that allows code to run with highly privileged system rights. Apple has fixed the zero-days and other vulnerabilities with the release of iOS 14.2 earlier. Project Zero leader Ben Hawkes provided his own bare-bones disclosure here.
2. 3-actively-exploited-0days-found-by-google
3. hackers-are-on-the-hunt-for-oracle-servers-vulnerable-to-potent-exploit
4. Vladimir Marugov murder: Russian 'Sausage King' killed in sauna with a crossbow
5. billions-stolen-credentials-defunct-breach-index-site-leaked-online
6. fireeye-releases-threatpursuit-a-windows-vm-for-threat-intel-analysts