Week in review: F5 BIG-IP RCE exploitation, URL spoofing flaws in Zoom, Google Docs – Help Net Security

Here’s an overview of some of last week’s most interesting news, articles and interviews:

Microsoft patches Windows LSA spoofing zero-day under active attack (CVE-2022-26925)
May 2022 Patch Tuesday is here, and Microsoft has marked it by releasing fixes for 74 CVE-numbered vulnerabilities, including one zero-day under active attack (CVE-2022-26925) and two publicly known vulnerabilities (CVE-2022-29972 and CVE-2022-22713).

Attackers are attempting to exploit critical F5 BIG-IP RCE
Researchers have developed PoC exploits for CVE-2022-1388, a critical remote code execution bug affecting F5 BIG-IP multi-purpose networking devices/modules.

Researchers uncover URL spoofing flaws on Zoom, Box, Google Docs
Researchers have discovered several URL spoofing bugs in Box, Zoom and Google Docs that would allow phishers to generate links to malicious content and make it look like it’s hosted by an organization’s SaaS account.

Critical flaw in Zyxel firewalls grants access to corporate networks…

Read Full Story: https://www.helpnetsecurity.com/2022/05/15/week-in-review-f5-big-ip-rce-exploitation-url-spoofing-flaws-in-zoom-google-docs/

The post Week in review: F5 BIG-IP RCE exploitation, URL spoofing flaws in Zoom, Google Docs – Help Net Security first appeared on SEO, Marketing and Social News | OneSEOCompany.com.

source: https://news.oneseocompany.com/2022/05/15/week-in-review-f5-big-ip-rce-exploitation-url-spoofing-flaws-in-zoom-google-docs-help-net-security_2022051519855.html

Your content is great. However, if any of the content contained herein violates any rights of yours, including those of copyright, please contact us immediately by e-mail at media[@]kissrpr.com.