Network Security News Summary for Tuesday August 16th, 2022
Channel: Internet Storm Center Stormcast
Date: 2022-08-16

Realtek Vuln Followup; MacOS Priv Escalatio; Zoom; Vuln Bootloaders; HPE ILO

Realtek CVE-2022-27255 Followup (snort signature and presentation)
 https://isc.sans.edu/diary/Realtek+SDK+SIP+ALG+Vulnerability%3A+A+Big+Deal%2C+but+not+much+you+can+do+about+it.+CVE+2022-27255/28940

MacOS Privilege Escalation
 https://sector7.computest.nl/post/2022-08-process-injection-breaking-all-macos-security-layers-with-a-single-vulnerability/

Zoom Update
 https://explore.zoom.us/en/trust/security/security-bulletin/

Microsoft Block Vulnerable Bootloaders
 https://eclypsium.com/2022/08/11/vulnerable-bootloaders-2022/

HPE Integrated Lights Out 5 Vulnerablities
 https://support.hpe.com/hpesc/public/docDisplay?docLocale=en_US&docId=emr_na-hpesbhf04333en_us

keywords: hpe; ilo; light out; microsoft; bios; bootloader; uefi; zoom; macos; realtek; deserialization; object; sip