The NCSC’s weekly threat report is drawn from recent open source reporting. from NCSC Report Feed https://bit.ly/2WMA2oL Content Provided from https://bit.ly/2WMA2oL
Security
1923 posts
The NCSC’s weekly threat report is drawn from recent open source reporting. from NCSC Report Feed https://bit.ly/2WMA2oL
Original release date: March 25, 2020 Apple has released security updates to address vulnerabilities in multiple products. An attacker could exploit some of these vulnerabilities to take control of an affected system. The Cybersecurity and Infrastructure Security Agency (CISA) encourages users and administrators to review the Apple security pages for the following products and apply the necessary updates: iTunes 12.10.5 for Windows iOS 13.4 and iPadOS 13.4 Safari 13.1 watchOS 6.2 tvOS 13.4 macOS Catalina 10.15.4, Security Update 2020-002 Mojave, Security Update 2020-002 High Sierra Xcode 11.4 This product is provided subject to this Notification and this Privacy & Use […]
Original release date: March 25, 2020 Adobe has released a security update to address a vulnerability in Creative Cloud Desktop Application. An attacker could exploit this vulnerability to take control of an affected system. The Cybersecurity and Infrastructure Security Agency (CISA) encourages users and administrators to review Adobe Security Bulletin APSB20-11 and apply the necessary update. This product is provided subject to this Notification and this Privacy & Use policy. from CISA Current Activity https://bit.ly/2UgBiic via US-CERT Current Activity http://ift.tt/1Btyqkb Stay safe *”This link is provided for informational purposes only and does not represent an endorsement by or affiliation with […]
Original release date: March 23, 2020 Microsoft has released a security advisory to address remote code execution vulnerabilities in Adobe Type Manager Library affecting all currently supported versions of Windows and Windows Server operating systems. A remote attacker can exploit these vulnerabilities to take control of an affected system. Microsoft is aware of limited, targeted attacks exploiting these vulnerabilities in the wild. The Cybersecurity and Infrastructure Security Agency (CISA) encourages users and administrators to review Microsoft Advisory ADV200006 and the CERT Coordination Center (CERT/CC) Vulnerability Note VU#354840 for more information and apply the necessary mitigations until patches are made available. […]
Original release date: March 19, 2020 Drupal has released security updates to address vulnerabilities affecting Drupal 8.7.x and 8.8.x. An attacker could exploit these vulnerabilities to take control of an affected system. The Cybersecurity and Infrastructure Security Agency (CISA) encourages users and administrators to review the Drupal security release and apply the necessary updates or mitigations. This product is provided subject to this Notification and this Privacy & Use policy. from CISA Current Activity http://bit.ly/38YAR08 via US-CERT Current Activity http://ift.tt/1Btyqkb Stay safe *”This link is provided for informational purposes only and does not represent an endorsement by or affiliation with […]
Original release date: March 19, 2020 Cisco has released security updates to address multiple vulnerabilities in SD-WAN Solution software. An attacker could exploit these vulnerabilities to take control of an affected system. For updates addressing lower severity vulnerabilities, see the Cisco Security Advisories webpage. The Cybersecurity and Infrastructure Security Agency (CISA) encourages users and administrators to review the following Cisco advisories and apply the necessary updates. SD-WAN Solution Privilege Escalation Vulnerability cisco-sa-sdwpresc-ySJGvE9 SD-WAN Solution Command Injection Vulnerability cisco-sa-sdwclici-cvrQpH9v SD-WAN Solution Buffer Overflow Vulnerability cisco-sa-sdwanbo-QKcABnS2 This product is provided subject to this Notification and this Privacy & Use policy. from CISA […]
Original release date: March 19, 2020 Google has released Chrome version 80.0.3987.149 for Windows, Mac, and Linux. This version addresses vulnerabilities that an attacker could exploit to take control of an affected system. The Cybersecurity and Infrastructure Security Agency (CISA) encourages users and administrators to review the Chrome Release and apply the necessary updates. This product is provided subject to this Notification and this Privacy & Use policy. from CISA Current Activity http://bit.ly/2xSOAc6 via US-CERT Current Activity http://ift.tt/1Btyqkb Stay safe *”This link is provided for informational purposes only and does not represent an endorsement by or affiliation with the […]
Original release date: March 18, 2020 Adobe has released security updates to address vulnerabilities in multiple products. An attacker could exploit some of these vulnerabilities to take control of an affected system. The Cybersecurity and Infrastructure Security Agency (CISA) encourages users and administrators to review the following Adobe Security Bulletins and apply the necessary updates. Genuine Integrity Service APSB20-12 Acrobat and Reader APSB20-13 PhotoShop APSB20-14 Experience Manager APSB20-15 ColdFusion APSB20-16 Bridge APSB20-17 This product is provided subject to this Notification and this Privacy & Use policy. from CISA Current Activity http://bit.ly/3dkjBGa via US-CERT Current Activity http://ift.tt/1Btyqkb Stay safe *”This link […]
How to make sure your organisation is prepared for an increase in home working, and advice on spotting coronavirus (COVID-19) scam emails. from NCSC Guidance Feed http://bit.ly/391hAuR via IFTTT This post is available in full on the NCSC.GOV.UK site