Security Bulletins

Subscribe to Security Bulletins feed
Updated: 16 sec ago

ST19-001: Best Practices for Securing Election Systems

28 min 2 sec ago
Original release date: May 21, 2019

Read more

Categories: Tech

Staying Cyber Safe During Memorial Day

Mon, 05/20/2019 - 13:10
Original release date: May 20, 2019

As Memorial Day approaches, the Cybersecurity and Infrastructure Security Agency (CISA) reminds users to stay cyber safe. Users should be cautious of potential scams, such as unsolicited emails that contain malicious links or attachments with malware. Users should also be aware of the risks associated with online shopping and traveling with mobile devices.

CISA recommends users review the following tips for information on how to guard against these risks:

Read more

Categories: Tech

SB19-140: Vulnerability Summary for the Week of May 13, 2019

Mon, 05/20/2019 - 06:07
Original release date: May 20, 2019

Read more

Categories: Tech

Microsoft Releases Security Updates to Address Remote Code Execution Vulnerability

Thu, 05/16/2019 - 08:51
Original release date: May 16, 2019

Microsoft has released security updates to address a remote code execution vulnerability in the following in-support and out-of-support operating systems:

  • In-support systems: Windows 7, Windows Server 2008 R2, and Windows Server 2008
  • Out-of-support systems: Windows 2003 and Windows XP

A remote attacker could exploit this vulnerability to take control of an affected system.

Read more

Categories: Tech

Cisco Releases Security Updates for Multiple Products

Wed, 05/15/2019 - 10:43
Original release date: May 15, 2019

Cisco has released security updates to address vulnerabilities in multiple Cisco products. A remote attacker could exploit some of these vulnerabilities to take control of an affected system.

The Cybersecurity and Infrastructure Security Agency (CISA) encourages users and administrators to review the Cisco Security Advisories page and apply the necessary updates.

Read more

Categories: Tech

VMware Releases Security Updates

Tue, 05/14/2019 - 12:46
Original release date: May 14, 2019

VMware has released security updates to address vulnerabilities in vCenter Server, ESXi, Workstation, and Fusion. An attacker could exploit some of these vulnerabilities to take control of an affected system.

Read more

Categories: Tech

Adobe Releases Security Updates

Tue, 05/14/2019 - 11:13
Original release date: May 14, 2019

Adobe has released security updates to address vulnerabilities in multiple products. An attacker could exploit some of these vulnerabilities to take control of an affected system.

Read more

Categories: Tech

Microsoft Releases May 2019 Security Updates

Tue, 05/14/2019 - 11:11
Original release date: May 14, 2019

Microsoft has released updates to address multiple vulnerabilities in Microsoft software. A remote attacker could exploit some of these vulnerabilities to take control of an affected system.

Read more

Categories: Tech

Intel Releases Security Updates, Mitigations for Multiple Products

Tue, 05/14/2019 - 10:54
Original release date: May 14, 2019

Intel has released security updates and recommendations to address vulnerabilities in multiple products. An attacker could exploit some of these vulnerabilities to take control of an affected system.
 
The Cybersecurity and Infrastructure Security Agency (CISA) encourages users and administrators to review the Intel Product Security Center Advisories page, apply the necessary mitigations, and refer to vendors for appropriate patches, when available.

Read more

Categories: Tech

Samba Releases Security Updates

Tue, 05/14/2019 - 10:29
Original release date: May 14, 2019

The Samba Team has released security updates to address a vulnerability in Samba. An attacker could exploit this vulnerability take control of an affected system.

The Cybersecurity and Infrastructure Security Agency (CISA) encourages users and administrators to review the Samba Security Announcement for CVE-2018-16860 and apply the necessary updates.

Read more

Categories: Tech

Facebook Releases Security Advisory for WhatsApp

Tue, 05/14/2019 - 09:59
Original release date: May 14, 2019

Facebook has released a security advisory to address a vulnerability in WhatsApp. A remote attacker could exploit this vulnerability to take control of an affected device.

The Cybersecurity and Infrastructure Security Agency (CISA) encourages users to review the Facebook Security Advisory for CVE-2019-3568 and upgrade to the appropriate version.

Read more

Categories: Tech

Apple Releases Multiple Security Updates

Tue, 05/14/2019 - 08:29
Original release date: May 14, 2019

Apple has released security updates to address vulnerabilities in multiple products. A remote attacker could exploit some of these vulnerabilities to take control of an affected system.

The Cybersecurity and Infrastructure Security Agency (CISA) encourages users and administrators to review the Apple security pages for the following products and apply the necessary updates:

Read more

Categories: Tech

Cisco Releases Security Updates

Mon, 05/13/2019 - 17:39
Original release date: May 13, 2019

Cisco has released security updates to address vulnerabilities in multiple Cisco products. A remote attacker could exploit one of these vulnerabilities to take control of an affected system.

The Cybersecurity and Infrastructure Security Agency (CISA) encourages users and administrators to review the following Cisco Security Advisories and apply the necessary updates:

Read more

Categories: Tech

AR19-133A: Microsoft Office 365 Security Observations

Mon, 05/13/2019 - 07:38
Original release date: May 13, 2019
Summary

As the number of organizations migrating email services to Microsoft Office 365 (O365) and other cloud services increases, the use of third-party companies that move organizations to the cloud is also increasing. Organizations and their third-party partners need to be aware of the risks involved in transitioning to O365 and other cloud services.

Read more

Categories: Tech

SB19-133: Vulnerability Summary for the Week of May 6, 2019

Mon, 05/13/2019 - 03:45
Original release date: May 13, 2019

Read more

Categories: Tech

North Korean Malicious Cyber Activity

Thu, 05/09/2019 - 10:02
Original release date: May 09, 2019

The Department of Homeland Security (DHS) and the Federal Bureau of Investigation (FBI) have identified a malware variant—referred to as ELECTRICFISH—used by the North Korean government. The U.S. Government refers to malicious cyber activity by the North Korean government as HIDDEN COBRA.

Read more

Categories: Tech

AR19-129A: MAR-10135536-21 – North Korean Tunneling Tool: ELECTRICFISH

Thu, 05/09/2019 - 08:58
Original release date: May 09, 2019
Description Notification

This report is provided "as is" for informational purposes only. The Department of Homeland Security (DHS) does not provide any warranties of any kind regarding any information contained herein. The DHS does not endorse any commercial product or service referenced in this bulletin or otherwise.

Read more

Categories: Tech

Drupal Releases Security Update

Thu, 05/09/2019 - 08:49
Original release date: May 09, 2019

Drupal has released a security update to address a vulnerability in Drupal Core. A remote attacker could exploit this vulnerability to take control of an affected website.

The Cybersecurity and Infrastructure Security Agency (CISA) encourages users and administrators to review Drupal’s security advisory SA-CORE-2019-007 and apply the necessary updates.

Read more

Categories: Tech

Cisco Releases Security Update for Elastic Services Controller

Tue, 05/07/2019 - 10:37
Original release date: May 07, 2019

Cisco has released a security update to address a vulnerability in Cisco Elastic Services Controller. A remote attacker could exploit this vulnerability to take control of an affected system.

The Cybersecurity and Infrastructure Security Agency (CISA) encourages users and administrators to review the Cisco Security Advisory and apply the necessary update.

Read more

Categories: Tech

SB19-126: Vulnerability Summary for the Week of April 29, 2019

Mon, 05/06/2019 - 03:52
Original release date: May 06, 2019

Read more

Categories: Tech

Pages

© 2000-2019 Systems By....