Zero Day - Securin

Oct 18, 2022

Securin’s (previously CSW) Expert Discovers a Zero-Day Vulnerability in Tenable’s Nessus Scanner

Securin experts have discovered a Zero Day vulnerability with medium severity in Tenable’s Nessus Professional scanner.

Aug 30, 2022

Have you Patched the Apache Log4j vulnerability CVE-2021-44228?

Apache Log4j vulnerability is a critical zero-day code execution vulnerability. On December 9, 2021, the Internet was set on fire when an exploit was posted publicly for Apache Log4J - a well-known logging utility in the Java programming language.

Aug 4, 2022

Follina: The No Patch Microsoft Office 0-Day Bug [CVE-2022-30190] Springs in Wild

An unpatched vulnerability tracked as CVE-2022-30190 (aka Follina) in the remote Word template feature enables adversaries to execute malicious code on targeted systems of Microsoft Office.

Jun 20, 2022

Have you Patched the Apache Log4j vulnerability CVE-2021-44228?

Apache Log4j vulnerability CVE-2021-44228 is a critical zero-day code execution vulnerability with a CVSS base score of 10. This weakness poses a significant risk to many applications and cloud services and it needs to be patched right away!

Mar 31, 2022

Spring4Shell (CVE-2022-22965): Are you vulnerable to this Zero Day?

A zero-day RCE vulnerability in Java Spring Core library is predicted to be the next Log4j. Are you prepared for the impending Spring4Shell threat?

Mar 2, 2022

Latency Analysis of DHS CISA KEVs

In this blog, CSW experts analyzed CISA’s Known Exploited Vulnerabilities (KEV) list for latencies in publishing, exploiting, and patching to understand how fast attackers are weaponizing them for attacks.

Jan 25, 2022

Securin Discovers a XSS Vulnerability in WordPress Post Duplicator Plugin

Securin discovered and reported a Stored Cross-Site Scripting vulnerability in WordPress Post Duplicator Plugin that allows an authenticated attacker to inject a JavaScript payload into a trusted URL.

Jan 7, 2022

Securin (previously CSW) Discovers a Stored Cross-Site Scripting Vulnerability in WordPress Customize Login Image

Cyber Security Works has discovered a new zero-day (Stored Cross-Site Scripting) vulnerability, CVE-2021-33851 in WordPress Customize Login Image.

Dec 24, 2021

Zoho: CISA and FBI Issues Alert for New Zero-Day Vulnerability (CVE-2021-44077), Patch Now!

An APT group is using CVE-2021-44077 and CVE-2021-44515 in Zoho ManageEngine ServiceDesk Plus and Desktop Central Servers to compromise businesses in a range of industries, including military and technology.

Nov 30, 2021

Securin (previously CSW) Discovers its 50th Zero Day Vulnerability in WordPress Microsoft Clarity Plugin

Cyber Security Works has discovered a new zero-day (Cross-Site Scripting) vulnerability, CVE-2021-33850 in WordPress Microsoft Clarity.

Attack Surface Management

Vulnerability Intelligence

Vulnerability Management

Penetration Testing

PARTNERS

RESOURCES

WHO WE ARE

CAREERS

Securin’s (previously CSW) Expert Discovers a Zero-Day Vulnerability in Tenable’s Nessus Scanner

Have you Patched the Apache Log4j vulnerability CVE-2021-44228?

Follina: The No Patch Microsoft Office 0-Day Bug [CVE-2022-30190] Springs in Wild

Have you Patched the Apache Log4j vulnerability CVE-2021-44228?

Spring4Shell (CVE-2022-22965): Are you vulnerable to this Zero Day?

Latency Analysis of DHS CISA KEVs

Securin Discovers a XSS Vulnerability in WordPress Post Duplicator Plugin

Securin (previously CSW) Discovers a Stored Cross-Site Scripting Vulnerability in WordPress Customize Login Image

Zoho: CISA and FBI Issues Alert for New Zero-Day Vulnerability (CVE-2021-44077), Patch Now!

Securin (previously CSW) Discovers its 50th Zero Day Vulnerability in WordPress Microsoft Clarity Plugin

Contact

Security Solutions

Resource Center