Security Advisories

Please see Security Advisories for the week ending June 4, 2021 Critical Security Advisory: VMware Releases Security Updates for Critical Vulnerabilities Zero-Day Flaw Actively Exploited in WordPress Fancy Product Designer Plugin Cisco  Releases Security Updates for Multiple Products Mozilla Releases Security Updates for Firefox ________________________________ Critical Security Advisory: VMware Releases Security Updates for Critical Vulnerabilities Situation VMware has released security updates to address multiple vulnerabilities in vCenter Server and Cloud Foundation. VMware… Read More

Critical Security Advisory: VMware Releases Security Updates for Critical Vulnerabilities Situation VMware has released security updates to address multiple vulnerabilities in vCenter Server and Cloud Foundation. VMware is urging vCenter users to update vCenter Server versions 6.5, 6.7, and 7.0 immediately. Problem The most severe of the vulnerabilities that were patched is a remote code execution vulnerability (CVE-2021-21985) found in vSphere Client (HTML5). This vulnerability is due to lack of… Read More

Please see Security Advisories for the week ending May 28, 2021 Microsoft Announces New Campaign from NOBELIUM Joint CISA-FBI Cybersecurity Advisory on Sophisticated Spearphishing Campaign Current Updates on Pulse Connect Secure Apple Releases Security Updates Google Releases Security Updates for the Chrome Browser ________________________________ Microsoft Announces New Campaign from NOBELIUM Situation The Microsoft Threat Intelligence Center (MSTIC) has released information on the uncovering of a widespread malicious email campaign undertaken by the activity… Read More

Please see Security Advisories for the week ending May 21, 2021 CISA-FBI Joint Cybersecurity Advisory on DarkSide Ransomware Cisco Releases Security Updates for Multiple Products Emergency Notification About Ransomware has been made ________________________________ CISA-FBI Joint Cybersecurity Advisory on DarkSide Ransomware Situation CISA and the Federal Bureau of Investigation (FBI) have updated Joint Cybersecurity Advisory AA21-131A: DarkSide Ransomware: Best Practices for Preventing Disruption from Ransomware Attacks. Problem Regarding the recent incident where a pipeline company… Read More

Please see Security Advisories for the week ending May 7, 2021   CISA Releases Analysis Reports on New FiveHands Ransomware Cisco  Releases Security Updates for Multiple  Products Mozilla Releases Security Updates for Firefox Joint NCSC-CISA-FBI-NSA Cybersecurity Advisory on Russian SVR Activity VMware Releases Security Update Multiple Vulnerabilities in Exim Disclosed Samba Releases Security Updates Apple Releases Security Updates Xen Advisory – x86 Vulnerabilities ________________________________ CISA Releases Analysis Reports on New FiveHands Ransomware… Read More

Please see Security Advisories for the week ending April 30, 2021 Cisco Releases Security Updates for Multiple Products ISC Releases Security Advisory for BIND CISA Releases ICS Advisory on Real-Time Operating System Vulnerabilities Apple Releases Security Updates Google Releases Security Updates for the Chrome Browser ________________________________ Cisco Releases Security Updates for Multiple Products Situation Cisco has discovered and patched numerous vulnerabilities in several products: Cisco Adaptive Security Appliance, Cisco Firepower Management… Read More

Please see Security Advisories for the week ending April 23, 2021 Trend Micro Antivirus Products Exploited Wildly CISA Incident Response to SUPERNOVA Malware Drupal Releases Security Updates on Several Products Juniper Networks Releases Security Updates SonicWall Releases Patches for Email Security Products CISA Issues Emergency Directive on Pulse Connect Secure VMware Releases Security Update Oracle Releases April 2021 Critical Patch Updates for several products Mozilla Releases Security Update for Firefox, Firefox… Read More

Please see Security Advisories for the week ending April 16, 2021 FBI Issues Alert on Mamba Ransomware Zero-Day Exploit for Google Chrome and Microsoft Edge New Palo Alto Networks Security Advisories Google Releases Security Updates for Chrome Microsoft April 2021 Security Updates to Mitigate Newly Disclosed Microsoft Exchange Vulnerabilities Updates on Microsoft Exchange Server Vulnerabilities ________________________________ FBI Issues Alert on Mamba Ransomware Situation The FBI has issued a warning about Mamba… Read More

Please see Security Advisories for the week ending April 9, 2021 Critical Zoom vulnerability triggers remote code execution without user input Cisco Releases Security Updates for Multiple Products Malicious Cyber Activity Targeting Critical SAP Applications ________________________________ Critical Zoom vulnerability triggers remote code execution without user input Situation A zero-day vulnerability in Zoom was found during a Pwn2Own contest for white-hat professionals. Problem The researchers from Computest have found a three-bug attack… Read More

Please see Security Advisories for the week ending April 2, 2021 VMware Releases Security Update for VMware Carbon Black Cloud Workload VMware Releases Security Updates for Several Products FBI-CISA Joint Advisory on Exploitation of Fortinet FortiOS Vulnerabilities Google Releases Security Updates for Chrome Citrix Releases Security Updates for Hypervisor ________________________________ VMware Releases Security Update for VMware Carbon Black Cloud Workload Situation VMware has released security updates to address a vulnerability— CVE-2021-21982— in… Read More