The security feed is a resource for MSPs and IT professionals to stay up to date with the latest cybersecurity news and vulnerability alerts related to OS, browsers, VPN and RDP. Protect your business and your clients with security news as it comes.
Microsoft has released July 2022 security updates for Windows 11/10/8/7 and Windows Server 2022/2019/2012/2008.
These updates include 84 security fixes. Users should update as soon as possible to avoid potential exploitation.
System administrators should update servers as soon as possible to avoid potential exploitation.
Important links:
How to update Windows
July 2022 Security Updates (Release Notes)
Mozilla has released Firefox version 102 with fixes for several high priority security issues.
Users should update as soon as possible.
Important links:
How to update Firefox to the latest release
Firefox 102 Release Notes
Microsoft has released June 2022 security updates for Windows 11/10/8/7 and Windows Server 2019/2012/2008.
These updates include 53 security fixes. Users should update as soon as possible to avoid potential exploitation.
System administrators should update servers as soon as possible to avoid potential exploitation.
Important links:
How to update Windows
June 2022 Security Updates (Release Notes)
Microsoft has released details and workarounds for a remote code execution vulnerability in Windows being tracked as CVE-2022-30190.
A remote code execution vulnerability exists when MSDT is called using the URL protocol from a calling application such as Word. An attacker who successfully exploits this vulnerability can run arbitrary code with the privileges of the calling application.
This vulnerability is known to be exploited in the wild.
System administrators are urged to review the guidance and apply mitigations to avoid potential exploitation.
Important links:
Guidance for CVE-2022-30190 Microsoft Support Diagnostic Tool Vulnerability
VMware has patched multiple vulnerabilities in their VMware Workspace ONE Access, Identity Manager and vRealize Automation products.
These vulnerabilities could be exploited by a remote attacker to execute code on an affected system.
Administrators should update immediately to avoid potential exploitation.
Read the full details here:
VMware Security Advisory VMSA-2022-0014
Apple has released iOS 15.5 with fixes for critical vulnerabilities that could be exploited to take control of a vulnerable device.
Users should update as soon as possible to avoid potential exploitation.
Updates for iPadOS, WatchOS, and tvOS should also be installed.
Important links:
How to update iOS
iOS 15.5 Release Notes
How to update watchOS
watchOS 8.6 Release Notes
How to update tvOS
tvOS 15.5 Release Notes
Apple has released MacOS Monterey 12.4 with fixes for critical security issues.
Apple has also released security updates for MacOS Big Sur and MacOS Catalina, along with an update for Safari 15.5 that should be installed using the Mac App Store.
These updates contain fixes for critical vulnerabilities that could be exploited to take control of a vulnerable system.
Users should update as soon as possible to avoid potential exploitation.
Important links for MacOS Monterey users:
How to update MacOS
MacOS 12.4 Release Notes
Important links for MacOS Big Sur and MacOS Catalina users:
How to update MacOS
Big Sur 11.6.6 Release Notes
Security Update 2022-004 Catalina Release Notes
How to update Safari
Safari 15.5 Release Notes
How to update Xcode
Xcode 13.4 Release Notes
Microsoft has released May 2022 security updates for Windows 11/10/8/7 and Windows Server 2022/2019/2016/2012/2008.
These updates include 62 security fixes. Users should update as soon as possible to avoid potential exploitation.
System administrators should update servers as soon as possible to avoid potential exploitation.
Important links:
How to update Windows
May 2022 Security Updates (Release Notes)
Microsoft has released April 2022 security updates for Windows 10/8/7, Windows Server 2022/2019/2016/2012/2008, Office, and Visual Studio.
These updates include 101 security fixes. Users should update as soon as possible to avoid potential exploitation.
System administrators should update servers as soon as possible to avoid potential exploitation.
Important links:
How to update Windows
April 2022 Security Updates (Release Notes)
The Microsoft Teams Malware attack campaign is a new way to target millions of Microsoft users. Learn how to protect yourself and your organization.
Read the full blog here:
4 Simple Steps to Protect Against Microsoft Teams Malware
关注官方微信公众号
扫码关注
扫码关注
浙公网安备 33010602011788号