Microsoft Releases Information on CVE-2019-1491

Microsoft has released information about CVE-2019-1491, a vulnerability in SharePoint Server. An attacker could exploit this vulnerability to obtain sensitive information.Microsoft released security updates for this vulnerability as part of…

Comments Off on Microsoft Releases Information on CVE-2019-1491

WordPress Releases Security and Maintenance Updates

WordPress 5.3 and prior versions are affected by multiple vulnerabilities. An attacker could exploit some of these vulnerabilities to take control of an affected website.The Cybersecurity and Infrastructure Security Agency…

Comments Off on WordPress Releases Security and Maintenance Updates

Microsoft Releases December 2019 Security Updates

Microsoft has released updates to address multiple vulnerabilities in Microsoft software. A remote attacker could exploit some of these vulnerabilities to take control of an affected system.The Cybersecurity and Infrastructure…

Comments Off on Microsoft Releases December 2019 Security Updates

Samba Releases Security Updates

The Samba Team has released security updates to address vulnerabilities in multiple versions of Samba. An attacker could exploit one of these vulnerabilities to take control of an affected system.The…

Comments Off on Samba Releases Security Updates

VMware Releases Security Updates for ESXi and Horizon DaaS

VMware has released security updates to address a vulnerability in ESXi and Horizon DaaS. An attacker could exploit this vulnerability to take control of an affected system.The Cybersecurity and Infrastructure…

Comments Off on VMware Releases Security Updates for ESXi and Horizon DaaS

ACSC Releases Fundamentals of Cross Domain Solutions

The Australian Cyber Security Centre (ACSC) has released a cybersecurity guide outlining the fundamentals of cross domain solution (CDS) technologies. This guidance provides cross domain security principles to enable organizations…

Comments Off on ACSC Releases Fundamentals of Cross Domain Solutions

NCSC-NZ Releases Cyber Governance Resource for Leaders

The New Zealand National Cyber Security Centre (NCSC-NZ) has released an article on a new cybersecurity governance resource to support public and private sector leaders in making decisions about their…

Comments Off on NCSC-NZ Releases Cyber Governance Resource for Leaders

AA19-339A: Dridex Malware

This Alert is the result of recent collaboration between Department of the Treasury Financial Sector Cyber Information Group (CIG) and the Department of the Treasury’s Financial Crimes Enforcement Network (FinCEN)…

Comments Off on AA19-339A: Dridex Malware