Eset corregge una vulnerabilità di sicurezza con gravità “alta” che interessa i propri prodotti di sicurezza. Tale vulnerabilità, qualora sfruttata, potrebbe consentire a un attaccante locale la possibilità di elevare i propri privilegi sui sistemi interessati. Source link Author: csirt@pec.acn.gov.it Article used for cyber security…
Today, CISA and the Multi-State Information Sharing & Analysis Center (MS-ISAC) released a joint Cybersecurity Advisory (CSA), Threat Actor Leverages Compromised Account of Former Employee to Access State Government Organization to provide network defenders with the tactics, techniques, and procedures (TTPs) utilized by a threat actor…
Microsoft ha rilasciato gli aggiornamenti di sicurezza mensili che risolvono un totale di 73 nuove vulnerabilità, di cui 2 di tipo 0-day. Source link Author: csirt@pec.acn.gov.it Article used for cyber security disclosure.
The Internet Systems Consortium (ISC) released security advisories to address vulnerabilities affecting multiple versions of ISC’s Berkeley Internet Name Domain (BIND) 9. A cyber threat actor could exploit one of these vulnerabilities to cause a denial-of-service condition. CISA encourages users and administrators to review the…
Rilevate nuove vulnerabilità, di cui una con gravità “critica” e una con gravità “alta”, in alcuni relativi alla suite di videoconferenza Zoom. Source link Author: csirt@pec.acn.gov.it Article used for cyber security disclosure.
JetBrains released a security advisory to address a vulnerability (CVE-2024-23917) in TeamCity On-Premises. A cyber threat actor could exploit this vulnerability to take control of an affected system. CISA encourages users and administrators to review the Critical Security Issue Affecting TeamCity On-Premises-CVE-2024-23917 and apply the necessary…
PostgreSQL Global Development Group ha rilasciato aggiornamenti di sicurezza per risolvere una vulnerabilità con gravità “alta” in PostgreSQL, noto DBMS open source. Source link Author: csirt@pec.acn.gov.it Article used for cyber security disclosure.
CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2024-21762 Fortinet FortiOS Out-of-Bound Write Vulnerability These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise. Binding Operational Directive…
