Today, CISA, the National Security Agency (NSA), and the Federal Bureau of Investigation (FBI) released a joint Cybersecurity Advisory (CSA), PRC State-Sponsored Actors Compromise and Maintain Persistent Access to U.S. Critical Infrastructure alongside supplemental Joint Guidance: Identifying and Mitigating Living off the Land Techniques. The following…
Google ha rilasciato un aggiornamento per il browser Chrome al fine di correggere 3 vulnerabilità di sicurezza, di cui 2 con gravità “alta”. Source link Author: csirt@pec.acn.gov.it Article used for cyber security disclosure.
Moby and the Open Container Initiative (OCI) have released updates for multiple vulnerabilities (CVE-2024-23651, CVE-2024-23652, CVE-2024-23653, CVE-2024-21626) affecting Docker-related components, including Moby BuildKit and OCI runc. A cyber threat actor could exploit these vulnerabilities to take control of an affected system. CISA encourages users and…
Risolta vulnerabilità con gravità “critica” in Mastodon, noto social network di microblogging open source decentralizzato. Tale vulnerabilità, qualora sfruttata, potrebbe permettere – a un utente malintenzionato remoto – la possibilità di impersonare e prendere il controllo di qualsiasi account remoto. Source link Author: csirt@pec.acn.gov.it Article…
Juniper Networks released a security bulletin to address multiple vulnerabilities affecting Juniper Secure Analytics optional applications. A cyber threat actor could exploit one of these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review the Juniper Security Bulletin JSA76718 and…
Disponibile un Proof of Concept (PoC) per la vulnerabilità CVE-2023-6246 presente in GNU C Library, conosciuta anche come glibc, libreria software open-source che fornisce servizi di sistema essenziali per sistemi operativi Unix-like. Source link Author: csirt@pec.acn.gov.it Article used for cyber security disclosure.
CISA released two Industrial Control Systems (ICS) advisories on February 1, 2024. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-24-032-01 Gessler GmbH WEB-MASTER ICSA-24-032-03 AVEVA Edge products (formerly known as InduSoft Web Studio) CISA encourages users and administrators to review…
Apple ha rilasciato aggiornamenti di sicurezza per sanare molteplici vulnerabilità che interessano i propri prodotti. Source link Author: csirt@pec.acn.gov.it Article used for cyber security disclosure.
