Bitbucket Server and Data Center command injection vulnerability [CVE-2022-36804]
CVE number – CVE-2022-36804 This advisory discloses a critical severity security vulnerability which was introduced in version 7.0.0 of Bitbucket Server and
Read MoreAuthor: Jason Davies
Linux Kernel Watch Queue Race Condition Privilege Escalation Vulnerability [CVE-2022-2959]
CVE number = CVE-2022-2959 This vulnerability allows local attackers to escalate privileges on affected installations of Linux Kernel. An attacker
Read More
Microsoft report on a sustained phishing campaign by the SEABORGIUM threat actor
The Microsoft Threat Intelligence Center (MSTIC) has observed and taken actions to disrupt campaigns launched by SEABORGIUM, an actor Microsoft
Read More
Linux Kernel route4_change Double Free Privilege Escalation Vulnerability [CVE-2022-2588]
CVE number – CVE-2022-2588 This vulnerability allows local attackers to escalate privileges on affected installations of Linux Kernel. An attacker
Read More
Apple macOS LaunchServices Sandbox Escape Privilege Escalation Vulnerability [CVE-2022-26696]
CVE number = CVE-2022-26696 This vulnerability allows remote attackers to escape the sandbox on affected installations of Apple macOS. An
Read More
New UK emergency alert service due to be launched this year
Emergency Alerts is a new service from the UK government. It’s expected to launch in October 2022. Emergency alerts will
Read More
Cheaper broadband for struggling UK families
Broadband bills could be cut for millions of low-income households under Government plans to encourage ‘social tariffs’. A new service,
Read More
DrayTek releases security updates for multiple routers [CVE-2022-32548]
DrayTek have released security updates to address a critical vulnerability, found by Trellix researchers, which could lead to unauthenticated remote code execution (RCE). An
Read More
CMA provisionally clears NortonLifeLock / Avast merger
The CMA in the UK has provisionally cleared the anticipated acquisition of Avast by NortonLifeLock following an in-depth merger investigation.
Read More
Trend Micro Apex One Security Agent Link Following Local Privilege Escalation Vulnerability [CVE-2022-36336]
CVE number – CVE-2022-36336 This vulnerability allows local attackers to escalate privileges on affected installations of Trend Micro Apex One
Read More