Luca Donetti Dontin Il sito di un pazzo sistemista!

Repository for Software Attestation and Artifacts Now Live

Software producers who partner with the federal government can now upload their Secure Software Development Attestation Forms to CISA’s Repository for Software Attestation and Artifacts. Software producers that provide the government software can fill out the form to attest to implementation of specific security practices….

Continue reading →

PoC pubblico per lo sfruttamento della CVE-2024-23334 (AL02/240318/CSIRT-ITA)

Disponibile un Proof of Concept (PoC) per la CVE-2024-23334 – già sanata dalla comunità di sviluppatori – presente nel framework AIOHTTP, utilizzato per creare applicazioni web ad alte prestazioni che richiedono la gestione di elevate richieste HTTP. Tale vulnerabilità – con score CVSS v3.x pari…

Continue reading →

DHCPv6 Prefix Delegation on Palo Alto’s NGFW

Finally! With PAN-OS 11.0 a long missing IPv6 feature was introduced: DHCPv6-PD aka prefix delegation. For the first time, we can now operate a PAN-OS firewall directly on the Internet (the IPv6-Internet that is) on many kinds of ISP connections. Remember: To get a routed…

Continue reading →

Cisco Releases Security Updates for IOS XR Software

Cisco released security updates to address vulnerabilities in Cisco IOS XR software. A cyber threat actor could exploit one of these vulnerabilities to take control of an affected device.  CISA encourages users and administrators to review the following advisories and apply the necessary updates:  Cisco…

Continue reading →

Vulnerabilità in Apache Tomcat (AL03/240315/CSIRT-ITA)

Rilevate 2 vulnerabilità di sicurezza – già sanate dal vendor – nel noto server web open source sviluppato da Apache Software Foundation. Tale vulnerabilità potrebbero essere sfruttate per sovraccaricare le risorse di calcolo dei sistemi interessati al fine di compromettere la disponibilità del servizio. Source…

Continue reading →

CISA Releases Fifteen Industrial Control Systems Advisories

CISA released fifteen Industrial Control Systems (ICS) advisories on March 14, 2024. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-24-074-01 Siemens SENTRON 7KM PAC3x20 ICSA-24-074-02 Siemens Solid Edge ICSA-24-074-03 Siemens SINEMA Remote Connect Server ICSA-24-074-04 Siemens SINEMA Remote…

Continue reading →

Risolte vulnerabilità in prodotti Cisco (AL01/240314/CSIRT-ITA)

Aggiornamenti di sicurezza sanano 7 nuove vulnerabilità, di cui 3 con gravità “alta”, in alcuni prodotti Cisco con software IOS XR vulnerabile installato. Source link Author: csirt@pec.acn.gov.it Article used for cyber security disclosure.

Continue reading →

Microsoft Releases Security Updates for Multiple Products

Microsoft has released security updates to address vulnerabilities in multiple products. A cyber threat actor could exploit some of these vulnerabilities to take control of an affected system.    CISA encourages users and administrators to review the following and apply the necessary updates:  Microsoft Security…

Continue reading →

Page 1 of 80 1 2 3 4 5 ... Last →