Critical Google Chrome Zero-Day Bug Exploited in the Wild

The security vulnerability could lead to arbitrary code execution by way of application crashing.

https://www.darkreading.com/vulnerabilit...-exploited

China's Winnti APT Compromises National Grid in Asia for 6 Months

Attacks against critical infrastructure are becoming more commonplace and, if a recent PRC-sponsored attack is anything to go by, easier to pull off.

https://www.darkreading.com/ics-ot/china...r-6-months

Microsoft Patches a Pair of Actively Exploited Zero-Days

Five critical bugs, zero-days exploited in the wild, Exchange Server, and more headline Microsoft's September 2023 Patch Tuesday release. Here's what to patch now.

https://www.darkreading.com/application-...-zero-days

'Redfly' hackers infiltrated power supplier's network for 6 months


An espionage threat group tracked as 'Redfly' hacked a national electricity grid organization in Asia and quietly maintained access to the breached network for six months. [...]


https://www.bleepingcomputer.com/news/se...-6-months/

Why Network Visibility Doesn’t Have to be so Complicated


Smart devices offer numerous benefits to both homes and small businesses, but they also pose unique security risks that can fly under the radar. Learn from Firewalla on how consumers and small business owners can effectively secure their smart homes and workplaces with the help of increased visibility. [...]


https://www.bleepingcomputer.com/news/se...mplicated/

Apple backports BLASTPASS zero-day fix to older iPhones


Apple released security updates for older iPhones to fix a zero-day vulnerability tracked as CVE-2023-41064 that was actively exploited to infect iOS devices with NSO's Pegasus spyware. [...]


https://www.bleepingcomputer.com/news/se...r-iphones/

Free Download Manager site redirected Linux users to malware for years


A reported Free Download Manager supply chain attack redirected Linux users to a malicious Debian package repository that installed information-stealing malware. [...]


https://www.bleepingcomputer.com/news/se...for-years/

CISA offers free security scans for public water utilities


The U.S. Cybersecurity & Infrastructure Security Agency (CISA) has announced it is offering free security scans for critical infrastructure facilities, such as water utilities, to help protect these crucial units from hacker attacks. [...]


https://www.bleepingcomputer.com/news/se...utilities/

Windows 11 KB5030219 cumulative update released with 24 fixes, changes


Microsoft has released the Windows 11 22H2 KB5030219 cumulative update to fix security vulnerabilities and introduce 24 changes, improvements, and bug fixes. [...]


https://www.bleepingcomputer.com/news/mi...s-changes/

Adobe warns of critical Acrobat and Reader zero-day exploited in attacks


Adobe has released security updates to patch a zero-day vulnerability in Acrobat and Reader tagged as exploited in attacks. [...]


https://www.bleepingcomputer.com/news/se...n-attacks/