Ransomwarecritical

Week in review: Kali Linux 2021.3, how to avoid cloud configuration breaches, hybrid digital dexterity

Help Net Securityby @helpnetsecurityFeb 28, 2022 · 14:42 UTC (Feb 28, 2022)5 min read3

Read at helpnetsecurity.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2021-30860 CVE-2021-30858 CVE-2021-40444

Tags: cve-2021-30860 cve-2021-30858 cve-2021-40444 ransomware

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2021-30858	Use-After-Free in WebKit on Apple iOS, iPadOS, and macOS Allows Arbitrary Code Execution	8.8	13%	KEV	Aug 24, 2021 KEV Nov 3, 2021
CVE-2021-30860	Integer Overflow in Apple PDF Processing Enables Arbitrary Code Execution (CVE-2021-30860)	7.8	76%	KEV	Aug 24, 2021 KEV Nov 3, 2021
CVE-2021-40444	Remote Code Execution via MSHTML Rendering Engine in Microsoft Windows/Office (CVE-2021-40444)	8.8	98%	KEVRansomwarePoC ×2	Sep 15, 2021 KEV Nov 3, 2021

From the original article

5 min read at helpnetsecurity.com

Here’s an overview of some of last week’s most interesting news, articles and interviews: Apple fixes “zero-click” iMessage zero-day exploited to deliver spyware (CVE-2021-30860) Apple has released security updates for macOS, iOS, iPadOS, watchOS and Safari that patch two vulnerabilities (CVE-2021-30860, CVE-2021-30858) that are being exploited in attacks in the wild.

Help Net Security

By @helpnetsecurity · helpnetsecurity.com

Read the full article at Help Net Security

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.