1 min read

Monthly Security Bulletin – October 2023

This month's security bulletin hot topics:

1. Exploit released for critical VMware SSH auth bypass vulnerability

2. Chrome extensions can steal plaintext passwords from websites

3. Okta: Hackers target IT help desks to gain Super Admin, disable MFA

4. ASUS routers vulnerable to critical remote code execution flaws

5. W3LL phishing kit hijacks thousands of Microsoft 365 accounts, bypasses MFA

6. Cisco warns of VPN zero-day exploited by ransomware gangs

7. Microsoft Teams phishing attack pushes DarkGate malware

8. New ‘MetaStealer’ malware targets Intel-based macOS systems

9. Hackers use new 3AM ransomware to save failed LockBit attack

10. Microsoft leaks 38TB of private data via unsecured Azure storage

11. Thousands of Juniper devices vulnerable to unauthenticated RCE flaw

12. Fake WinRAR proof-of-concept exploit drops VenomRAT malware

13. Hotel hackers redirect guests to fake Booking.com to steal cards

14. Critical Vulnerability in libwebp Library

15. Google assigns new maximum rated CVE to libwebp bug exploited in attacks

16. Modern GPUs vulnerable to new GPU.zip side-channel attack

17. Fake Bitwarden sites push new ZenRAT password-stealing malware

18. Microsoft breach led to theft of 60,000 US State Dept emails

19. Progress warns of maximum severity WS_FTP Server vulnerability

20. Exploit released for Microsoft SharePoint Server auth bypass flaw

Your browser does not support PDFs. Download the PDF