Experimental News Clipping Site

Tag: cyber threat actor

  • Alerts: Oracle Releases Quarterly Critical Patch Update Advisory for October 2024

    —

    by

    system automation
    in

    Source URL: https://www.cisa.gov/news-events/alerts/2024/10/17/oracle-releases-quarterly-critical-patch-update-advisory-october-2024 Source: Alerts Title: Oracle Releases Quarterly Critical Patch Update Advisory for October 2024 Feedly Summary: Oracle released its quarterly Critical Patch Update Advisory for October 2024 to address vulnerabilities in multiple products. A cyber threat actor could exploit some of these vulnerabilities to take control of an affected system.  CISA encourages users…

  • Alerts: Best Practices to Configure BIG-IP LTM Systems to Encrypt HTTP Persistence Cookies

    —

    by

    system automation
    in

    Source URL: https://www.cisa.gov/news-events/alerts/2024/10/10/best-practices-configure-big-ip-ltm-systems-encrypt-http-persistence-cookies Source: Alerts Title: Best Practices to Configure BIG-IP LTM Systems to Encrypt HTTP Persistence Cookies Feedly Summary: CISA has observed cyber threat actors leveraging unencrypted persistent cookies managed by the F5 BIG-IP Local Traffic Manager (LTM) module to enumerate other non-internet facing devices on the network. F5 BIG-IP is a suite of hardware and…

  • Alerts: Microsoft Releases October 2024 Security Updates

    —

    by

    system automation
    in

    Source URL: https://www.cisa.gov/news-events/alerts/2024/10/08/microsoft-releases-october-2024-security-updates Source: Alerts Title: Microsoft Releases October 2024 Security Updates Feedly Summary: Microsoft released security updates to address vulnerabilities in multiple products. A cyber threat actor could exploit some of these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review the following and apply necessary updates: Microsoft…

  • Alerts: Versa Networks Releases Advisory for a Vulnerability in Versa Director, CVE-2024-45229

    —

    by

    system automation
    in

    Source URL: https://www.cisa.gov/news-events/alerts/2024/09/20/versa-networks-releases-advisory-vulnerability-versa-director-cve-2024-45229 Source: Alerts Title: Versa Networks Releases Advisory for a Vulnerability in Versa Director, CVE-2024-45229 Feedly Summary: Versa Networks has released an advisory for a vulnerability (CVE-2024-45229) affecting Versa Director. A cyber threat actor could exploit this vulnerability to exercise unauthorized REST APIs. CISA urges organizations to apply necessary updates, hunt for any malicious…

  • Alerts: Ivanti Releases Security Update for Cloud Services Appliance

    —

    by

    system automation
    in

    Source URL: https://www.cisa.gov/news-events/alerts/2024/09/13/ivanti-releases-security-update-cloud-services-appliance Source: Alerts Title: Ivanti Releases Security Update for Cloud Services Appliance Feedly Summary: Ivanti has released a security update addressing an OS command injection vulnerability (CVE-2024-8190) affecting Ivanti Cloud Services Appliance (CSA) 4.6 (all versions before patch 519). A cyber threat actor could exploit this vulnerability to take control of an affected…

  • Alerts: Microsoft Releases September 2024 Security Updates

    —

    by

    system automation
    in

    Source URL: https://www.cisa.gov/news-events/alerts/2024/09/10/microsoft-releases-september-2024-security-updates Source: Alerts Title: Microsoft Releases September 2024 Security Updates Feedly Summary: Microsoft released security updates to address vulnerabilities in multiple products. A cyber threat actor could exploit some of these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review the following and apply necessary updates: Microsoft…