Original release date: December 15, 2022CISA has released forty-one (41) Industrial Control Systems (ICS) advisories on 15 December 2022. These advisories provide timely information about current security issues, vulnerabilities, and…
Original release date: December 15, 2022Drupal has released security updates to address vulnerabilities affecting H5P and the File (Field) Paths modules for Drupal 7.x. An attacker could exploit these vulnerabilities…
Original release date: December 15, 2022CISA has consolidated its social media presence on Twitter. Three accounts — @ICSCERT, @Cyber, and @CISAInfraSec — are no longer active. Additionally, the @USCERT_gov Twitter…
Original release date: December 12, 2022Fortinet has released security updates to address a heap-based buffer overflow vulnerability (CVE-2022-42475) in FortiOS. An attacker could exploit this vulnerability to take control of…
Original release date: December 12, 2022 High Vulnerabilities Primary Vendor -- Product Description Published CVSS Score Source & Patch Info activerecord_project -- activerecord A possible escalation to RCE vulnerability exists…
Original release date: December 9, 2022Cisco released a security advisory for a vulnerability affecting IP Phone 7800 and 8800 Series. A remote attacker could exploit this vulnerability to cause a…
Original release date: December 8, 2022Today, CISA published a Phishing Infographic to help protect both organizations and individuals from successful phishing operations. This infographic provides a visual summary of how threat…
Original release date: December 8, 2022CISA has released three (3) Industrial Control Systems (ICS) advisories on 08 December 2022. These advisories provide timely information about current security issues, vulnerabilities, and…
Original release date: December 5, 2022 High Vulnerabilities Primary Vendor -- Product Description Published CVSS Score Source & Patch Info acer -- aspire_a315-22g_firmware Vulnerability in the HQSwSmiDxe DXE driver on…
Original release date: December 1, 2022SummaryActions to take today to mitigate cyber threats from ransomware: • Prioritize remediating known exploited vulnerabilities. • Train users to recognize and report phishing attempts.…
