CISA: Vulnerabilities in Veeam Backup and Replication are being exploited

https://thehackernews.com/2022/12/cisa-alert-veeam-backup-and-replication.html

Google releases patch for another zero-day in Chrome

https://thehackernews.com/2022/11/update-chrome-browser-now-to-patch-new.html

thehackernews.com

Researchers find 80,000 unpatched Hikvision cameras still on the internet

https://www.theregister.com/2022/08/24/hikvision_camera_patch/

Apple Mac and mobile users encouraged to patch now for the Zero-Days mentioned yesterday. Full access/control possible.

iPhone Users Urged to Update to Patch 2 Zero-Days

FYI, my phone didn’t present this as an option yet until I refreshed.

Apple patches Zero-Day vulnerabilities in iOS, iPadOS and macOS that may be being exploited

Five vulnerabilities in Illumina devices disclosed; 4 of them assigned a 10/10 rating. FDA and CISA tells healthcare orgs to take immediate action

Healthcare Organizations Warned About Maximum Severity Vulnerabilities in Illumina Devices

Atlassian discloses critical zero-day RCE vulnerability in Confluence (CVE-2022-26134) that is actively being exploited and fixes next day. Patch now!

https://confluence.atlassian.com/doc/confluence-security-advisory-2022-06-02-1130377146.html

https://www.bleepingcomputer.com/news/security/atlassian-fixes-confluence-zero-day-widely-exploited-in-attacks/

PaloAlto: SpringShell (CVE-2022-22965) is actively being exploited

https://unit42.paloaltonetworks.com/cve-2022-22965-springshell/

Veeam Backup & Replication unauthenticated remote code execution vulnerability

https://www.veeam.com/kb4288

Apache releases 2.16 to address log4j/log4shell. 2.15 still had JNDI lookup issues.

https://isc.sans.edu/forums/diary/Log4j+Getting+ready+for+the+long+haul+CVE202144228/28130/

Apache and other sources mention mitigation measures if you can’t patch for the attacks on log4j now

https://twitter.com/MalwareTechBlog/status/1469291924733390848?s=20

https://logging.apache.org/log4j/2.x/security.html