Ricercatori di sicurezza hanno rilevato la presenza di una backdoor nei tool di compressione dati XZ Utils utilizzati in diverse distribuzioni Linux Source link Author: csirt@pec.acn.gov.it Article used for cyber security disclosure.
Ricercatori di sicurezza hanno rilevato la presenza di una backdoor nei tool di compressione dati XZ Utils utilizzati in diverse distribuzioni Linux Source link Author: csirt@pec.acn.gov.it Article used for cyber security disclosure.
Cisco released security updates to address vulnerabilities in Cisco IOS, IOS XE, and AP software. A cyber threat actor could exploit some of these vulnerabilities to cause a denial-of-service. CISA encourages users and administrators to review the following advisories and apply the necessary updates: Cisco…
Splunk ha rilasciato aggiornamenti di sicurezza per correggere 2 vulnerabilità con gravità “alta” nel noto prodotto per l’analisi del traffico di rete Enterprise. Source link Author: csirt@pec.acn.gov.it Article used for cyber security disclosure.
CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2023-24955 Microsoft SharePoint Server Code Injection Vulnerability These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise. Binding Operational…
Microsoft ha rilasciato gli aggiornamenti di sicurezza mensili che risolvono un totale di 38 nuove vulnerabilità, 3 di tipo 0-day. Source link Author: csirt@pec.acn.gov.it Article used for cyber security disclosure.
CISA released one Industrial Control Systems (ICS) advisory on March 21, 2024. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-24-081-01 Advantech WebAccess/SCADA CISA encourages users and administrators to review the newly released ICS advisory for technical details and…
È stata rilevata una nuova campagna di phishing che sfrutta loghi e riferimenti riconducibili a Trenitalia, al fine di carpire le informazioni personali delle potenziali vittime, compresi gli estremi delle carte di credito. Source link Author: csirt@pec.acn.gov.it Article used for cyber security disclosure.
Today, CISA, the Federal Bureau of Investigation (FBI), and the Multi-State Information Sharing and Analysis Center (MS-ISAC) released an updated joint guide, Understanding and Responding to Distributed Denial-Of-Service Attacks, to address the specific needs and challenges faced by organizations in defending against DDoS attacks. The…
