InfoSec News & Tutorials
VMware Releases Security Updates for Carbon Black App Control VMware has released security updates to address a vulnerability in Carbon Black App Control. A remote attacker could exploit this vulnerability…
CISA Releases Fifteen Industrial Control Systems Advisories CISA released fifteen (15) Industrial Control Systems (ICS) advisories on February 16, 2023. These advisories provide timely information about current security issues, vulnerabilities,…
Mozilla Releases Security Updates for Firefox 110 and Firefox ESR Mozilla has released security updates to address vulnerabilities in Firefox 110 and Firefox ESR. An attacker could exploit these vulnerabilities to…
Citrix Releases Security Updates for Workspace Apps, Virtual Apps and Desktops Citrix has released security updates to address high-severity vulnerabilities (CVE-2023-24486, CVE-2023-24484, CVE-2023-24485, and CVE-2023-24483) in Citrix Workspace Apps, Virtual…
CISA Adds Four Known Exploited Vulnerabilities to Catalog CISA has added four new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are…
Microsoft Releases February 2023 Security Updates Microsoft has released updates to address multiple vulnerabilities in Microsoft software. An attacker can exploit some of these vulnerabilities to take control of an…
#StopRansomware - Ransomware Attacks on Critical Infrastructure Fund DPRK Espionage Activities CISA, the National Security Agency (NSA), the Federal Bureau of Investigation (FBI), the Department of Health and Human Services…
OpenSSL Releases Security Advisory OpenSSL has released a security advisory to address multiple vulnerabilities affecting OpenSSL versions 3.0.0, 2.2.2, and 1.0.2. An attacker could exploit some of these vulnerabilities to…
CISA and FBI Release ESXiArgs Ransomware Recovery Guidance Today, CISA and the Federal Bureau of Investigation (FBI) released a joint Cybersecurity Advisory, ESXiArgs Ransomware Virtual Machine Recovery Guidance. This advisory…
CISA Releases ESXiArgs Ransomware Recovery Script CISA has released a recovery script for organizations that have fallen victim to ESXiArgs ransomware. The ESXiArgs ransomware encrypts configuration files on vulnerable ESXi…
Cisco Releases Security Advisories for Multiple Products Cisco released security updates for vulnerabilities affecting multiple products. A remote attacker could exploit these vulnerabilities to take control of an affected system.…
Drupal Releases Security Update to Address a Vulnerability in Apigee Edge Drupal released a security update to address a vulnerability affecting the Apigee Edge module for Drupal 9.x. An attacker…
VMware Releases Security Update for VMware vRealize Operations VMware released a security update that addresses a cross-site request forgery bypass vulnerability affecting VMware vRealize Operations. A malicious user could exploit…
JCDC Announces 2023 Planning Agenda Today, the Joint Cyber Defense Collaborative (JCDC) announced its 2023 Planning Agenda. This release marks a major milestone in the continued evolution and maturation of…
CISA, NSA, and MS-ISAC Release Advisory on the Malicious Use of RMM Software Today, the Cybersecurity and Infrastructure Security Agency (CISA), the National Security Agency (NSA), and the Multi-State Information…
VMware Releases Security Updates for VMware vRealize Log Insight VMware released security updates to address multiple vulnerabilities in VMware vRealize Log Insight. A remote attacker could exploit these vulnerabilities to…
CISA Releases Protecting Our Future: Partnering to Safeguard K–12 organizations from Cybersecurity Threats Today, CISA released Protecting Our Future: Partnering to Safeguard K–12 organizations from Cybersecurity Threats. The report provides…
Drupal Releases Security Advisories to Address Multiple Vulnerabilities Drupal has released security advisories to address vulnerabilities affecting multiple products. An attacker could exploit these vulnerabilities to access sensitive information. CISA…
Cisco Releases Security Advisory for Unified CM and Unified CM SME Cisco released a security advisory for a vulnerability affecting Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications…
CISA Updates Best Practices for Mapping to MITRE ATT&CK® Today, CISA updated Best Practices for MITRE ATT&CK® Mapping. The MITRE ATT&CK® framework is a lens through which network defenders can…
CISA Releases Twelve Industrial Control Systems Advisories CISA released twelve Industrial Control Systems (ICS) advisories on January 12, 2023. These advisories provide timely information about current security issues, vulnerabilities, and…
Drupal Releases Security Update to Address Vulnerability in Private Taxonomy Terms Drupal has released a security update to address a vulnerability affecting private vocabulary modules for Drupal 8.x. An unauthorized…
NCSC-UK Releases Guidance on Using MSP for Administering Cloud Services The United Kingdom’s National Cyber Security Centre (NCSC-UK) has released a blog post, Using MSPs to administer your cloud services,…
Microsoft Releases January 2023 Security Updates Microsoft has released updates to address multiple vulnerabilities in Microsoft software. An attacker could exploit some of these vulnerabilities to take control of an…