Новости за 21.06.2023

Apple ships major iOS security updates to cover code execution vulnerabilities already exploited in the wild.

Digitalization brings new security challenges, new concerns, and new threats, and CISOs should not think that it’s just business as usual.

Two critical-severity authentication bypass vulnerabilities in WordPress plugins with tens of thousands of installations.

Russian anti-malware vendor shares technical details on spyware implant deployed as part of recent zero-click iMessage attacks.

Enphase Energy has ignored CISA requests to fix remotely exploitable vulnerabilities in Enphase products.

SecurityWeek talks to Chief Information Security Officers from Bill.com, FreedomPay, and Tassat about their role and experience as CISOs.

New National Security Cyber Section will help the US disrupt and prosecute nation-state threat actors and state-sponsored cybercriminals.

Why are there so many vulnerabilities in Chrome? Is it realistically safe to use? Can Google do anything to make the web browser safer?

VMware updates a critical-level bulletin: “VMware has confirmed that exploitation of CVE-2023-20887 has occurred in the wild.”