A US Department of Homeland Security agency tasked with supporting cyber and physical security for US critical infrastructure. Read More
The CyberWire
CISA (noun)
Related Posts
Google Chrome Security Flaw Let Attackers to Crash the Browser
Google Chrome Security Flaw Let Attackers to Crash the Browser
As part of a security update for Chrome, Google has upgraded the Stable channels to 118.0.5993.117 for Mac and Linux and 118.0.5993.117/.118 for Windows.
The Extended Stable channel has been upgraded to 118.0.5993.117 for Mac and 118.0.5993.118 for Windows.
There are two security fixes in this release. Over the coming days and weeks, the update will be implemented.
High Severity Flaw Addressed
A Use after free in profiles is categorized as CVE-2023-5472 and has a severity level of “High.” Referencing memory after it has been released might cause a browser to crash, utilize unexpected values, or execute code. Hence, it can affect confidentiality, reliability, and accessibility.
Generally, a Use-After-Free (UAF) arises when dynamic memory is used improperly while a program is running. A program can be hacked by an attacker if, after freeing up memory, it fails to delete the pointer to that memory.
For exploitation to be successful, user involvement is necessary. Google awarded $3000 to the researcher @18楼梦想改造家 in recognition of their findings.
Chrome Security Update
Google recommends users update to the most recent version of Google Chrome to prevent exploiting vulnerabilities.
“The Stable channel has been updated to 118.0.5993.117 for Mac and Linux and 118.0.5993.117/.118 for Windows”, Google said.
“The Extended Stable channel has been updated to 118.0.5993.117 for Mac and 118.0.5993.118 for Windows”.
How to Update Google Chrome
On your computer, open Chrome.
At the top right, click More.
Click Help About Google Chrome.
Click Update Google Chrome. Important: If you can’t find this button, you’re on the latest version.
Click Relaunch.
Protect yourself from vulnerabilities using Patch Manager Plus to patch over 850 third-party applications quickly. Try a free trial to ensure 100% security.
The post Google Chrome Security Flaw Let Attackers to Crash the Browser appeared first on Cyber Security News.
Cyber Security News
Microsoft finally fixes Outlook alerts bug caused by December updates
Microsoft finally fixes Outlook alerts bug caused by December updates
Microsoft has finally fixed a known Outlook issue, confirmed in February, which was triggering incorrect security alerts after installing the December security updates for Outlook Desktop. […] Read More
Critical Security Flaws Affect Ivanti Avalanche, Threatening 30,000 Organizations
Critical Security Flaws Affect Ivanti Avalanche, Threatening 30,000 Organizations
Multiple critical security flaws have been reported in Ivanti Avalanche, an enterprise mobile device management solution that’s used by 30,000 organizations.
The vulnerabilities, collectively tracked as CVE-2023-32560 (CVSS score: 9.8), are stack-based buffer overflows in Ivanti Avalanche WLAvanacheServer.exe v6.4.0.0.
Cybersecurity company Tenable said the shortcomings are the result of buffer Read More
The Hacker News | #1 Trusted Cybersecurity News Site