Updated: Top Cyber Actions for Securing Water Systems

Today, CISA, the Environmental Protection Agency (EPA), and the Federal Bureau of Investigation (FBI) updated the joint fact sheet Top Cyber Actions for Securing Water Systems. This update includes additional…

Comments Off on Updated: Top Cyber Actions for Securing Water Systems

Vulnerability Summary for the Week of February 12, 2024

  High Vulnerabilities Primary Vendor -- Product Description Published CVSS Score Source & Patch Info wp_swings -- coupon_referral_program   Deserialization of Untrusted Data vulnerability in WP Swings Coupon Referral Program.…

Comments Off on Vulnerability Summary for the Week of February 12, 2024

Vulnerability Summary for the Week of February 5, 2024

  High Vulnerabilities Primary Vendor -- Product Description Published CVSS Score Source & Patch Info allegro_ai -- clearml Lack of authentication in all versions of the fileserver component of Allegro…

Comments Off on Vulnerability Summary for the Week of February 5, 2024

JetBrains Releases Security Advisory for TeamCity On-Premises

JetBrains released a security advisory to address a vulnerability (CVE-2024-23917) in TeamCity On-Premises. A cyber threat actor could exploit this vulnerability to take control of an affected system. CISA encourages…

Comments Off on JetBrains Releases Security Advisory for TeamCity On-Premises

Fortinet Releases Security Advisories for FortiOS

Fortinet released security updates to address critical remote code execution vulnerabilities in FortiOS (CVE-2024-21762, CVE-2024-23313). A cyber threat actor could exploit these vulnerabilities to take control of an affected system.…

Comments Off on Fortinet Releases Security Advisories for FortiOS

MAR-10448362-1.v1 Volt Typhoon

Notification This report is provided "as is" for informational purposes only. The Department of Homeland Security (DHS) does not provide any warranties of any kind regarding any information contained herein.…

Comments Off on MAR-10448362-1.v1 Volt Typhoon

CISA and Partners Release Advisory on PRC-sponsored Volt Typhoon Activity and Supplemental Living Off the Land Guidance

Today, CISA, the National Security Agency (NSA), and the Federal Bureau of Investigation (FBI) released a joint Cybersecurity Advisory (CSA), PRC State-Sponsored Actors Compromise and Maintain Persistent Access to U.S.…

Comments Off on CISA and Partners Release Advisory on PRC-sponsored Volt Typhoon Activity and Supplemental Living Off the Land Guidance