#Cybersecurity News Summary Dec 14

??New Technique Discovered To Bypass Web Application Firewalls (WAF) Of Several Vendors??

Following a study of the wireless device management platform from Cambium Networks, Claroty’s researchers identified the technique. They found a SQL injection flaw that might allow unauthorized access to private data such as?session cookies, tokens, SSH keys, and password hashes.

??Read in "Gb Hackers"

??New Actively Exploited Zero-Day Vulnerability Discovered in Apple Products??

?? Zero-day vulnerability alert!

Apple has released security updates to patch a new "actively exploited" 0-day code execution vulnerability.?

Make sure to update your iOS, iPadOS, macOS, tvOS, and Safari to keep your devices secure.?

??Read in "The Hackers News"

??Hackers Actively Exploiting Citrix ADC and Gateway Zero-Day Vulnerability??

Warning: Hackers are exploiting a new critical zero-day RCE vulnerability (CVE-2022-27518) in Citrix ADC & Gateway to gain control of affected systems.

??Read in "The Hacker News"

??The Tech Talent War Has No End In Sight. Here’s What You Need To Know??

Are you prepared for the coming war? No,?I’m not talking about some geopolitical clash,?but rather the significant challenge businesses will be dealing with for years to come: The tech talent war.

??Read in "Forbes"

?? Microsoft Squashes Zero-Day, Actively Exploited Bugs in Dec. Update ??

Here's what you need to patch now, including six critical updates for Microsoft's final Patch Tuesday of the year.

?? Read in "Dark Reading".

#cybersecurity #cybersec #itadministrator #itarchitecture