Invinsense Cybersecurity Newsletter 29-Nov-21

Patch Notes

• Netgear fixes code execution flaw in many SOHO devices

• VMware addresses SSRF, arbitrary file read flaws in vCenter Server

• Exploit released for Microsoft Exchange RCE bug, patch now

Cyber Attacks

• Millions of GoDaddy customer data compromised in breach

• Over nine million Android devices infected by info-stealing trojan

• Malware now trying to exploit new Windows Installer zero-day

Malware and Vulnerabilities

• Cisco Flaw Affects Firewalls

• New Windows zero-day with public exploit lets you become an admin

• New Variant of Joker Spreading via Play Store

• Linux_avp: A New Malware Targeting e-Commerce Websites

Cyber Tech

• Windows 11 KB5007262 Cumulative Update Preview Released

• Microsoft unveils ‘Super Duper Secure Mode’ in latest version of Edge

• A new DuckDuckGo tool is supposed to prevent apps from tracking Android users