{"uuid": "e7ddc3be-7ba6-4e1e-bc93-1c760e6b4b89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-42292", "type": "seen", "source": "https://t.me/cissp/4779", "content": "< Nov. 2021 Patch Tuesday > \nMicrosoft releases security patches for 55 new vulnerabilities, including two actively exploited zero-day flaws in Excel (CVE-2021-42292) and Exchange Server (CVE-2021-42321).\nRead Details: https://thehackernews.com/2021/11/microsoft-issues-patches-for-actively.html\n\nA new zero-day vulnerability (CVE-2021-3064) has been discovered in Palo Alto Networks GlobalProtect VPN, which could be exploited by an unauthenticated attacker to execute arbitrary code with root privileges on affected devices.\nDetail: https://thehackernews.com/2021/11/palo-alto-warns-of-zero-day-bug-in.html\n\nAccording to a new report, the Iranian hacking group Lyceum is responsible for a series of targeted attacks on ISPs, telecom operators, and other targets in Israel, Morocco, Tunisia, and Saudi Arabia.\nRead details: https://thehackernews.com/2021/11/irans-lyceum-hackers-target-telecoms.html", "creation_timestamp": "2026-09-01T17:00:35.492380Z"}