Archive for Cybersecurity - page 27

Aggiornamenti di sicurezza Apple (AL01/230922/CSIRT-ITA)

Apple ha rilasciato aggiornamenti di sicurezza per sanare 3 vulnerabilità di tipo 0-day che interessano i propri prodotti. Source link Author: csirt@pec.acn.gov.it Article used for cyber security disclosure.

Continue reading →

ISC Releases Security Advisories for BIND 9

The Internet Systems Consortium (ISC) has released security advisories to address vulnerabilities affecting ISC’s Berkeley Internet Name Domain (BIND) 9. A malicious cyber actor could exploit these vulnerabilities to cause denial-of-service conditions. CISA encourages users and administrators to review the following ISC advisories and apply…

Continue reading →

Vulnerabilità in prodotti QNAP (AL02/230922/CSIRT-ITA)

Aggiornamenti di sicurezza QNAP risolvono 2 vulnerabilità con gravità “alta” che interessano i prodotti QTS e Multimedia Console. Source link Author: csirt@pec.acn.gov.it Article used for cyber security disclosure.

Continue reading →

FBI and CISA Release Advisory on Snatch Ransomware

Today, the Federal Bureau of Investigation (FBI) and the Cybersecurity and Infrastructure Security Agency (CISA) released joint Cybersecurity Advisory (CSA) #StopRansomware: Snatch Ransomware, which provides indicators of compromise (IOCs) and tactics, techniques, and procedures (TTPs) associated with the Snatch ransomware variant. FBI investigations identified these IOCs…

Continue reading →

Rilevato sfruttamento in rete della CVE-2023-41179 relativa a prodotti Trend Micro (AL01/230920/CSIRT-ITA)

Rilevato lo sfruttamento attivo in rete della vulnerabilità CVE-2023-41179 – già sanata dal vendor – presente in alcuni prodotti Trend Micro per la protezione degli endpoint. Source link Author: csirt@pec.acn.gov.it Article used for cyber security disclosure.

Continue reading →

CISA Adds Eight Known Exploited Vulnerabilities to Catalog

CISA has added eight new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2022-22265 Samsung Mobile Devices Use-After-Free Vulnerability CVE-2014-8361 Realtek SDK Improper Input Validation Vulnerability CVE-2017-6884 Zyxel EMG2926 Routers Command Injection Vulnerability CVE-2021-3129 Laravel Ignition File Upload Vulnerability CVE-2022-31459 Owl Labs Meeting Owl Inadequate Encryption…

Continue reading →

Aggiornamenti WithSecure (AL01/230918/CSIRT-ITA)

Aggiornamenti di sicurezza WithSecure – precedentemente noto come F-Secure – risolvono una vulnerabilità di sicurezza in alcuni prodotti per Windows, Mac e Linux. Tale vulnerabilità, qualora sfruttata, potrebbe permettere la compromissione della disponibilità del servizio sui dispositivi interessati. Source link Author: csirt@pec.acn.gov.it Article used for…

Continue reading →

Fortinet Releases Security Updates for Multiple Products

Fortinet has released security updates to address vulnerabilities (CVE-2023-29183 and CVE-2023-34984) affecting FortiOS, FortiProxy, and FortiWeb. A cyber threat actor can exploit one of these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review Fortinet security advisories (FG-IR-23-106 and FG-IR-23-068) and…

Continue reading →

Page 27 of 79 ← First ... 25 26 27 28 29 ... Last →