CISA released six Industrial Control Systems (ICS) advisories on November 2, 2023. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-23-306-01 Red Lion Crimson ICSA-23-306-02 Mitsubishi Electric MELSEC iQ-F Series CPU Module ICSA-23-306-03 Mitsubishi Electric MELSEC Series ICSA-23-306-04 Franklin…
Disponibile aggiornamento di sicurezza che risolve una vulnerabilità in Django, noto framework open source per lo sviluppo di applicazioni web. Tale vulnerabilità, qualora sfruttata, potrebbe permettere la compromissione della disponibilità del servizio sulle istanze interessate. Source link Author: csirt@pec.acn.gov.it Article used for cyber security disclosure.
CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2023-46747 F5 BIG-IP Authentication Bypass Vulnerability CVE-2023-46748 F5 BIG-IP SQL Injection Vulnerability These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the…
Aggiornamenti di sicurezza sanano una vulnerabilità con gravità “critica” presente in Atlassian Confluence Data Center and Server. Source link Author: csirt@pec.acn.gov.it Article used for cyber security disclosure.
Today, CISA updated its guidance addressing two vulnerabilities, CVE-2023-20198 and CVE-2023-20273, affecting Cisco’s Internetworking Operating System (IOS) XE Software Web User Interface (UI). The guidance now notes that Cisco has fixed these vulnerabilities for the 17.6 Cisco IOS XE software release train with the 17.6.6a…
Scarica il riepilogo delle notizie pubblicate dallo CSIRT Italia dal 23 al 29 ottobre 2023. Source link Author: csirt@pec.acn.gov.it Article used for cyber security disclosure.
Today, CISA announces the launch of a new version of Logging Made Easy (LME), a straightforward log management solution for Windows-based devices that can be downloaded and self-installed for free. CISA’s version reimagines technology developed by the United Kingdom’s National Cyber Security Centre (NCSC), making it available…
Rilevato lo sfruttamento attivo in rete della vulnerabilità CVE-2023-5631 – già sanata dal vendor – che interessa il prodotto Roundcube Webmail, noto gestore di posta elettronica open source. Source link Author: csirt@pec.acn.gov.it Article used for cyber security disclosure.
