The US government Cybersecurity and Infrastructure Security Agency (CISA) has added advisories for Oracle and Google to the Known Exploited Vulnerabilities Catalog it maintains: CISA Adds Two Known Exploited Vulnerabilities to Catalog | CISA
Another fix for another zero-day Google Chrome flaw
Google Chrome is a very popular browser so it is worthwhile for the threat actors to keep poking away at it to find the vulnerabilities. The team a Google also keep looking and patching: Google pushes emergency Chrome update to fix 8th zero-day in 2022 (bleepingcomputer.com) Get Chrome patched now.
CISA adds a Microsoft vulnerability to the Known Exploited Vulnerabilities Catalog
The US government Cybersecurity and Infrastructure Security Agency (CISA) has added a Microsoft Windows flaw to the Known Exploited Vulnerabilities Catalog. CISA Has Added One Known Exploited Vulnerability to Catalog | CISA
Security updates for Cisco and Zimbra
The US government Cybersecurity and Infrastructure Security Agency (CISA) has issued security advisories for various Cisco products and Zimbra Collaboration Suite: Cisco Releases Security Updates for Multiple Products | CISA CISA Updates Advisory on Threat Actors Exploiting Multiple CVEs Against Zimbra Collaboration Suite | CISA
VMware, Citrix and Microsoft security advisories from CISA
The US government Cybersecurity and Infrastructure Security Agency (CISA) has issued the following security advisories: Citrix Releases Security Updates for ADC and Gateway | CISA VMware Releases Security Updates | CISA This is the advisory for Microsoft’s Patch Tuesday: Microsoft Releases November 2022 Security Updates | CISA
