Una vulnerabilità 0-day del motore Javascript di Internet Explorer è stata rilevata recentemente dal Threat Analysis Group (TAG) di Google. Tale vulnerabilità, identificata dalla CVE-2022-41128 e già sfruttata in passato, potrebbe consentire ad un utente malintenzionato da remoto l’esecuzione di codice arbitrario. Source link Author:…
Original release date: December 9, 2022 Cisco released a security advisory for a vulnerability affecting IP Phone 7800 and 8800 Series. A remote attacker could exploit this vulnerability to cause a denial-of-service condition. For more information, see the Cisco Security Advisories page. CISA encourages users…
VMware ha rilasciato aggiornamenti di sicurezza per sanare 4 vulnerabilità, di cui una “alta”, nei prodotti ESXi, vCenter Server e Cloud Foundation. Source link Author: csirt@pec.acn.gov.it Article used for cyber security disclosure.
Original release date: November 28, 2022 CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise. Note: To…
Google ha rilasciato un aggiornamento per il browser Chrome per correggere una vulnerabilità di sicurezza di tipo 0-day. Source link Author: csirt@pec.acn.gov.it Article used for cyber security disclosure.
Original release date: December 5, 2022 CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. This type of vulnerability is a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise. Note:…
Nell’ambito delle attività di monitoraggio, questo CSIRT ha rilevato un significativo aumento di attacchi di tipo Distributed Denial of Service (DDoS) perpetrati da gruppi di hacktivisti ai danni di istituzioni italiane. Source link Author: csirt@pec.acn.gov.it Article used for cyber security disclosure.
Original release date: December 1, 2022 CISA has released three (3) Industrial Control Systems (ICS) advisories on December 1, 2022. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. CISA encourages users and administrators to review the newly released ICS…
