Vulnerability Summary for the Week of February 26, 2024

  High Vulnerabilities Primary Vendor -- Product Description Published CVSS Score Source & Patch Info progress -- openedge   In OpenEdge Authentication Gateway and AdminServer prior to 11.7.19, 12.2.14, 12.8.1…

Comments Off on Vulnerability Summary for the Week of February 26, 2024

CISA and Partners Release Advisory on Threat Actors Exploiting Ivanti Connect Secure and Policy Secure Gateways Vulnerabilities

Today, CISA and the following partners released joint Cybersecurity Advisory Threat Actors Exploit Multiple Vulnerabilities in Ivanti Connect Secure and Policy Secure Gateways:  Federal Bureau of Investigation (FBI)  Multi-State Information…

Comments Off on CISA and Partners Release Advisory on Threat Actors Exploiting Ivanti Connect Secure and Policy Secure Gateways Vulnerabilities

CISA, FBI, and MS-ISAC Release Advisory on Phobos Ransomware

Today, CISA, the Federal Bureau of Investigation (FBI), and the Multi-State Information Sharing and Analysis Center (MS-ISAC) released a joint Cybersecurity Advisory (CSA), #StopRansomware: Phobos Ransomware, to disseminate known tactics,…

Comments Off on CISA, FBI, and MS-ISAC Release Advisory on Phobos Ransomware

Cisco Releases Security Advisories for Cisco NX-OS Software

Cisco released security advisories to address vulnerabilities affecting Cisco NX-OS Software. A cyber threat actor could exploit one of these vulnerabilities to cause a denial-of-service condition. CISA encourages users and administrators…

Comments Off on Cisco Releases Security Advisories for Cisco NX-OS Software

#StopRansomware: Phobos Ransomware

SUMMARY Note: This joint Cybersecurity Advisory (CSA) is part of an ongoing #StopRansomware effort to publish advisories for network defenders that detail various ransomware variants and ransomware threat actors. These #StopRansomware advisories…

Comments Off on #StopRansomware: Phobos Ransomware

Vulnerability Summary for the Week of February 19, 2024

High Vulnerabilities Primary Vendor -- Product Description Published CVSS Score Source & Patch Info agronholm -- cbor2 cbor2 provides encoding and decoding for the Concise Binary Object Representation (CBOR) (RFC…

Comments Off on Vulnerability Summary for the Week of February 19, 2024

SVR Cyber Actors Adapt Tactics for Initial Cloud Access

How SVR-Attributed Actors are Adapting to the Move of Government and Corporations to Cloud Infrastructure OVERVIEW This advisory details recent tactics, techniques, and procedures (TTPs) of the group commonly known…

Comments Off on SVR Cyber Actors Adapt Tactics for Initial Cloud Access