Original release date: December 29, 2022 CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise. Note: To…
Rilevato un nuovo metodo di exploitation, denominato “OWASSRF”, in grado di aggirare le contromisure proposte da Microsoft come mitigazione alla vulnerabilità di Exchange denominata ProxyNotShell. Source link Author: [email protected] Article used for cyber security disclosure.
Original release date: December 15, 2022 CISA has consolidated its social media presence on Twitter. Three accounts — @ICSCERT, @Cyber, and @CISAInfraSec — are no longer active. Additionally, the @USCERT_gov Twitter account is now renamed @CISACyber. The following current active Twitter accounts will include posts…
Disponibili aggiornamenti di sicurezza per Samba che sanano 4 vulnerabilità con gravità “alta”. Source link Author: [email protected] Article used for cyber security disclosure.
Original release date: December 15, 2022 Drupal has released security updates to address vulnerabilities affecting H5P and the File (Field) Paths modules for Drupal 7.x. An attacker could exploit these vulnerabilities to access sensitive information and remotely execute code. CISA encourages users and administrators to…
Risolte 5 vulnerabilità che impattano il kernel Linux. Tali vulnerabilità risiedono in ksmbd, un file server CIFS/SMB3 che è stato integrato nel Kernel a partire dalla versione 5.15. Source link Author: [email protected] Article used for cyber security disclosure.
Original release date: December 22, 2022 CISA released four Industrial Control Systems (ICS) advisories on December 22, 2022. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. CISA encourages users and administrators to review the newly released ICS advisories for…
Rilasciati aggiornamenti di sicurezza che risolvono 2 vulnerabilità in cURL, noto tool a linea di comando e libreria per il trasferimento dati via URL. Source link Author: [email protected] Article used for cyber security disclosure.
