Cisco released a security advisory to address a vulnerability (CVE-2023-20198) affecting IOS XE Software Web UI. A cyber threat actor can exploit this vulnerability to take control of an affected device. CISA encourages users and administrators to review the Cisco security advisory, apply the necessary…
Rilevato lo sfruttamento attivo in rete della vulnerabilità CVE-2023-20198 presente nel software Cisco IOS XE. Source link Author: csirt@pec.acn.gov.it Article used for cyber security disclosure.
Today, as part of the Ransomware Vulnerability Warning Pilot (RVWP), CISA launched two new resources for combating ransomware campaigns: A “Known to be Used in Ransomware Campaigns” column in the KEV Catalog that identifies KEVs associated with ransomware campaigns. A “Misconfigurations and Weaknesses Known to be…
Rilevate nuove vulnerabilità in alcuni prodotti Fortinet, di cui 2 con gravità “critica” e 8 con gravità “alta”. Source link Author: csirt@pec.acn.gov.it Article used for cyber security disclosure.
CISA released nineteen Industrial Control Systems (ICS) advisories on October 12, 2023. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-23-285-01 Siemens SIMATIC CP products ICSA-23-285-02 Siemens SCALANCE W1750D ICSA-23-285-03 Siemens SICAM A8000 Devices ICSA-23-285-04 Siemens Xpedition Layout Browser…
Microsoft ha rilasciato gli aggiornamenti di sicurezza mensili che risolvono un totale di 104 nuove vulnerabilità, di cui 3 di tipo 0-day. Source link Author: csirt@pec.acn.gov.it Article used for cyber security disclosure.
Today, CISA, the Federal Bureau of Investigation, the National Security Agency, and the U.S. Department of the Treasury released guidance on improving the security of open source software (OSS) in operational technology (OT) and industrial control systems (ICS). In alignment with CISA’s recently released Open…
Rilevata una vulnerabilità con gravità “alta” in libcue, libreria open source per il parsing e l’estrazione dati da file CUE. Tale vulnerabilità, qualora sfruttata, potrebbe consentire a un attaccante remoto l’esecuzione di codice arbitrario sui sistemi Linux. Source link Author: csirt@pec.acn.gov.it Article used for cyber…
