Vulnerability Summary for the Week of January 25, 2021

Original release date: February 1, 2021  High Vulnerabilities Primary Vendor -- Product Description Published CVSS Score Source & Patch Info async-git_project -- async-git The async-git package before 1.13.2 for Node.js…

Comments Off on Vulnerability Summary for the Week of January 25, 2021

Data Privacy Day

Original release date: January 28, 2021January 28 is Data Privacy Day (DPD), an annual effort promoting data privacy awareness and education. This year’s DPD events, sponsored by the National Cyber…

Comments Off on Data Privacy Day

AR21-027A: MAR-10319053-1.v1 – Supernova

Original release date: January 27, 2021Description Malware Analysis Report 10319053.r1.v1 2021-01-26 Notification This report is provided "as is" for informational purposes only. The Department of Homeland Security (DHS) does not…

Comments Off on AR21-027A: MAR-10319053-1.v1 – Supernova

FTC Reports Scammers Impersonating FTC

Original release date: January 26, 2021The Federal Trade Commission (FTC) has released information on scammers attempting to impersonate the FTC. The scammers operate an FTC-spoofed website that claims to provide…

Comments Off on FTC Reports Scammers Impersonating FTC

Vulnerability Summary for the Week of January 18, 2021

Original release date: January 25, 2021The CISA Weekly Vulnerability Summary Bulletin is created using information from the NIST NVD. In some cases, the vulnerabilities in the Bulletin may not yet…

Comments Off on Vulnerability Summary for the Week of January 18, 2021

Cisco Releases Advisories for Multiple Products

Original release date: January 21, 2021Cisco has released security updates to address vulnerabilities in multiple Cisco products. A remote attacker could exploit these vulnerabilities to take control of an affected…

Comments Off on Cisco Releases Advisories for Multiple Products

Vulnerability Summary for the Week of January 11, 2021

Original release date: January 18, 2021 The CISA Weekly Vulnerability Summary Bulletin is created using information from the NIST NVD. In some cases, the vulnerabilities in the Bulletin may not…

Comments Off on Vulnerability Summary for the Week of January 11, 2021

Apache Releases Security Advisory for Tomcat

Original release date: January 15, 2021The Apache Software Foundation has released a security advisory to address a vulnerability affecting multiple versions of Apache Tomcat. An attacker could exploit this vulnerability…

Comments Off on Apache Releases Security Advisory for Tomcat

RCE Vulnerability Affecting Microsoft Defender

Original release date: January 14, 2021Microsoft has released a security advisory to address a remote code execution vulnerability, CVE-2021-1647, in Microsoft Defender. A remote attacker can exploit this vulnerability to…

Comments Off on RCE Vulnerability Affecting Microsoft Defender