Experimental News Clipping Site

Tag: CISA

  • Alerts: CISA Adds Three Known Exploited Vulnerabilities to Catalog

    —

    by

    system automation
    in

    Source URL: https://www.cisa.gov/news-events/alerts/2024/10/09/cisa-adds-three-known-exploited-vulnerabilities-catalog Source: Alerts Title: CISA Adds Three Known Exploited Vulnerabilities to Catalog Feedly Summary: CISA has added three new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2024-23113 Fortinet Multiple Products Format String Vulnerability CVE-2024-9379 Ivanti Cloud Services Appliance (CSA) SQL Injection Vulnerability CVE-2024-9380 Ivanti Cloud Services Appliance (CSA) OS Command Injection…

  • Microsoft Security Blog: Cybersecurity Awareness Month: Securing our world—together

    —

    by

    system automation
    in

    Source URL: https://www.microsoft.com/en-us/security/blog/2024/10/01/cybersecurity-awareness-month-securing-our-world-together/ Source: Microsoft Security Blog Title: Cybersecurity Awareness Month: Securing our world—together Feedly Summary: To help our global cyberdefenders, Microsoft has put together the Be Cybersmart Kit, designed to educate everyone, on best practices for going passwordless, not falling for sophisticated phishing or fraud, device protection, AI safety, and more. The post Cybersecurity…

  • Alerts: CISA Adds Three Known Exploited Vulnerabilities to Catalog

    —

    by

    system automation
    in

    Source URL: https://www.cisa.gov/news-events/alerts/2024/10/08/cisa-adds-three-known-exploited-vulnerabilities-catalog Source: Alerts Title: CISA Adds Three Known Exploited Vulnerabilities to Catalog Feedly Summary: CISA has added three new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2024-43047 Qualcomm Multiple Chipsets Use-After-Free Vulnerability CVE-2024-43572 Microsoft Windows Management Console Remote Code Execution Vulnerability CVE-2024-43573 Microsoft Windows MSHTML Platform Spoofing Vulnerability…

  • Alerts: CISA Adds One Known Exploited Vulnerability to Catalog

    —

    by

    system automation
    in

    Source URL: https://www.cisa.gov/news-events/alerts/2024/10/02/cisa-adds-one-known-exploited-vulnerability-catalog Source: Alerts Title: CISA Adds One Known Exploited Vulnerability to Catalog Feedly Summary: CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2024-29824 Ivanti Endpoint Manager (EPM) SQL Injection Vulnerability These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose…

  • Alerts: CISA’s VDP Platform 2023 Annual Report Showcases Success

    —

    by

    system automation
    in

    Source URL: https://www.cisa.gov/news-events/alerts/2024/09/30/cisas-vdp-platform-2023-annual-report-showcases-success Source: Alerts Title: CISA’s VDP Platform 2023 Annual Report Showcases Success Feedly Summary: Today, the Cybersecurity and Infrastructure Security Agency (CISA) released its Vulnerability Disclosure Policy (VDP) Platform 2023 Annual Report, highlighting the service’s remarkable success in 2023, its second full year of operation. Throughout 2023, CISA focused on advocating for the increased…

  • The Cloudflare Blog: Advancing cybersecurity: Cloudflare implements a new bug bounty VIP program as part of CISA Pledge commitment

    —

    by

    system automation
    in

    Source URL: https://blog.cloudflare.com/cisa-pledge-commitment-bug-bounty-vip Source: The Cloudflare Blog Title: Advancing cybersecurity: Cloudflare implements a new bug bounty VIP program as part of CISA Pledge commitment Feedly Summary: Cloudflare strengthens its commitment to cybersecurity by joining CISA’s “Secure by Design" pledge. In line with this commitment, we’re enhancing our vulnerability disclosure policy by launching a VIP bug…

  • Hacker News: Attackers are increasingly targeting industrial systems with brute force

    —

    by

    system automation
    in

    Source URL: https://www.techradar.com/pro/security/hackers-are-increasingly-targeting-industrial-systems-with-brute-force-cisa-warns Source: Hacker News Title: Attackers are increasingly targeting industrial systems with brute force Feedly Summary: Comments AI Summary and Description: Yes Summary: The text highlights a significant increase in cyberattacks on operational technology (OT) and industrial control systems (ICS), specifically targeting endpoints in critical sectors like water and wastewater. The U.S. Cybersecurity…

  • Alerts: Cisco Releases Security Updates for IOS and IOS XE Software

    —

    by

    system automation
    in

    Source URL: https://www.cisa.gov/news-events/alerts/2024/09/26/cisco-releases-security-updates-ios-and-ios-xe-software Source: Alerts Title: Cisco Releases Security Updates for IOS and IOS XE Software Feedly Summary: Cisco released its September 2024 Semiannual Cisco IOS and IOS XE Software Security Advisory Bundled Publication to address vulnerabilities in IOS and IOS XE. A cyber threat actor could exploit some of these vulnerabilities to take control…

  • Alerts: Ivanti Releases Admin Bypass Security Update for Cloud Services Appliance

    —

    by

    system automation
    in

    Source URL: https://www.cisa.gov/news-events/alerts/2024/09/19/ivanti-releases-admin-bypass-security-update-cloud-services-appliance Source: Alerts Title: Ivanti Releases Admin Bypass Security Update for Cloud Services Appliance Feedly Summary: Ivanti has released a security update to address an admin bypass vulnerability (CVE-2024-8963) affecting Ivanti Cloud Services Appliance (CSA) version 4.6.  A cyber threat actor could exploit this vulnerability in conjunction with CVE-2024-8190–detailed in a Sept. 13…

  • Alerts: CISA Adds Five Known Exploited Vulnerabilities to Catalog

    —

    by

    system automation
    in

    Source URL: https://www.cisa.gov/news-events/alerts/2024/09/18/cisa-adds-five-known-exploited-vulnerabilities-catalog Source: Alerts Title: CISA Adds Five Known Exploited Vulnerabilities to Catalog Feedly Summary: CISA has added five new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2024-27348 Apache HugeGraph-Server Improper Access Control Vulnerability CVE-2020-0618 Microsoft SQL Server Reporting Services Remote Code Execution Vulnerability CVE-2019-1069 Microsoft Windows Task Scheduler…