- Apple Releases Security Updates for Multiple Products
- Threat Actors Exploiting Multiple Vulnerabilities Against Zimbra Collaboration Suite
- Zoom for Mac Vulnerability in the Wild
Apple has released security updates for multiple products.
Vulnerabilities in macOS Monterey, iOS and iPadOS, and Safari.
An attacker could exploit one of these vulnerabilities to take control of an affected device.
We encourage organizations to review the Apple security updates page for the following products and apply the necessary updates as soon as possible:
- MacOS Monterey 12.5.1
- iOS 15.6.1 and iPadOS 15.6.1
- Safari 15.6.1
CISA Bulletin: Apple Releases Security Updates for Multiple Products:
Apple security updates:
MacOS Monterey 12.5.1:
iOS 15.6.1 and iPadOS 15.6.1:
CISA and the Multi-State Information Sharing & Analysis Center (MS-ISAC) have released a joint Cybersecurity Advisory (CSA).
Active exploitation of multiple vulnerabilities against Zimbra Collaboration Suite (ZCS), an enterprise cloud-hosted collaboration software and email platform.
An attacker could exploit some of these vulnerabilities to take control of an affected system.
We encourage organizations to review Threat Actors Exploiting Multiple CVEs Against Zimbra Collaboration Suite for more information and apply the recommended mitigations.
CISA Bulletin: Threat Actors Exploiting Multiple Vulnerabilities Against Zimbra Collaboration Suite
Threat Actors Exploiting Multiple CVEs Against Zimbra Collaboration Suite:
A critical vulnerability in Zoom for Mac OS has been discovered.
An auto-update vulnerability that could have allowed malicious programs to use its elevated installing priviledges.
An attacker could exploit this vulnerability by granting them escalated privileges and control of the system.
We encourage organizations to update to the latest version of Zoom (Version 5.11.4  ) to fix the auto update issue.
Update Zoom for Mac now to avoid root-access vulnerability:
Latest Zoom update: