Tag: zero-day exploited

Google Chrome emergency update fixes 6th zero-day exploited in 2023
News

Google Chrome emergency update fixes 6th zero-day exploited in 2023

In order to combat ongoing attacks, Google has released an emergency security update today that addresses the sixth Chrome zero-day vulnerability of the year. In a new security advisory released today, the company acknowledged the existence of an exploit for the security flaw (tracked as CVE-2023-6345).Google said, "We are aware that there is a live exploit for CVE-2023-6345. Patched versions of the software are now being distributed worldwide to Windows users (119.0.6045.199/.200) and Mac and Linux users (119.0.6045.199), addressing the vulnerability in the Stable Desktop channel. As of earlier today, when BleepingComputer checked for updates, the security update was instantly available, despite the advisory stating read more Google Chrome emergency update fixes 6th zero-day ex...
Atlassian patches critical Confluence zero-day exploited in attacks
News

Atlassian patches critical Confluence zero-day exploited in attacks

The Confluence Data Center and Server software from the Australian software company Atlassian contains a maximum severity zero-day vulnerability that has been used in attacks and was fixed by urgent security updates. Atlassian said it had been informed of a problem wherein "external attackers may have exploited a previously unknown vulnerability in publicly accessible Confluence Data Center and Server instances to create unauthorized Confluence administrator accounts and access Confluence instances." "This issue does not affect Atlassian Cloud sites. Your Confluence site is hosted by Atlassian and is not exposed to this problem if it can be accessed through an atlassian.net domain read more Atlassian patches critical Confluence zero-day exploited in attacks. Stay informed with th...