Malicious Cyber Activity Targeting Critical SAP Applications

Original release date: April 6, 2021SAP systems running outdated or misconfigured software are exposed to increased risks of malicious attacks. SAP applications help organizations manage critical business processes—such as enterprise…

Comments Off on Malicious Cyber Activity Targeting Critical SAP Applications

CISA Releases Supplemental Direction on Emergency Directive for Microsoft Exchange Server Vulnerabilities

Original release date: March 31, 2021CISA has issued supplemental direction to Emergency Directive (ED) 21-02: Mitigate Microsoft Exchange On-Premises Product Vulnerabilities providing additional forensic triage and server hardening, requirements for…

Comments Off on CISA Releases Supplemental Direction on Emergency Directive for Microsoft Exchange Server Vulnerabilities

Adobe Releases Security Updates for ColdFusion

Original release date: March 23, 2021Adobe has released security updates to address a vulnerability affecting ColdFusion. An attacker could exploit this vulnerability to take control of an affected system. CISA…

Comments Off on Adobe Releases Security Updates for ColdFusion

CISA-FBI Joint Advisory on TrickBot Malware

Original release date: March 17, 2021CISA and the Federal Bureau of Investigation (FBI) have released a Joint Cybersecurity Advisory (CSA) on TrickBot malware. A sophisticated group of cyber criminals are…

Comments Off on CISA-FBI Joint Advisory on TrickBot Malware

Microsoft Releases Exchange On-premises Mitigation Tool

Original release date: March 16, 2021Microsoft has released the Exchange On-premises Mitigation Tool (EOMT.ps1) that can automate portions of both the detection and patching process. Microsoft stated the following along…

Comments Off on Microsoft Releases Exchange On-premises Mitigation Tool

Updates on Microsoft Exchange Server Vulnerabilities

Original release date: March 13, 2021CISA has added seven Malware Analysis Reports (MARs) to Alert AA21-062A: Mitigate Microsoft Exchange Server Vulnerabilities. Each MAR identifies a webshell associated with exploitation of…

Comments Off on Updates on Microsoft Exchange Server Vulnerabilities

F5 Security Advisory for RCE Vulnerabilities in BIG-IP, BIG-IQ

Original release date: March 10, 2021 F5 has released a security advisory to address remote code execution (RCE) vulnerabilities—CVE-2021-22986, CVE-2021-22987—impacting BIG-IP and BIG-IQ devices. An attacker could exploit these vulnerabilities…

Comments Off on F5 Security Advisory for RCE Vulnerabilities in BIG-IP, BIG-IQ

Microsoft Releases March 2021 Security Updates

Original release date: March 10, 2021Microsoft has released updates to address multiple vulnerabilities in Microsoft software. A remote attacker can exploit some of these vulnerabilities to take control of an…

Comments Off on Microsoft Releases March 2021 Security Updates