Vulnerability Summary for the Week of April 25, 2022

Original release date: May 2, 2022  High Vulnerabilities Primary Vendor -- Product Description Published CVSS Score Source & Patch Info jfinalcms_project -- jfinalcms JFinalCMS v2.0 was discovered to contain a…

Comments Off on Vulnerability Summary for the Week of April 25, 2022

AA22-117A: 2021 Top Routinely Exploited Vulnerabilities

Original release date: April 27, 2022SummaryThis joint Cybersecurity Advisory (CSA) was coauthored by cybersecurity authorities of the United States, Australia, Canada, New Zealand, and the United Kingdom: the Cybersecurity and…

Comments Off on AA22-117A: 2021 Top Routinely Exploited Vulnerabilities

2021 Top Routinely Exploited Vulnerabilities

Original release date: April 27, 2022CISA, the National Security Agency (NSA), the Federal Bureau of Investigation (FBI), the Australian Cyber Security Centre (ACSC), the Canadian Centre for Cyber Security (CCCS),…

Comments Off on 2021 Top Routinely Exploited Vulnerabilities

Vulnerability Summary for the Week of April 18, 2022

Original release date: April 25, 2022 | Last revised: April 26, 2022  High Vulnerabilities Primary Vendor -- Product Description Published CVSS Score Source & Patch Info microsoft -- windows_10 Remote…

Comments Off on Vulnerability Summary for the Week of April 18, 2022

FBI Releases IOCs Associated with BlackCat/ALPHV Ransomware

Original release date: April 22, 2022The Federal Bureau of Investigation (FBI) has released a Flash report detailing indicators of compromise (IOCs) associated with attacks involving BlackCat/ALPHV, a Ransomware-as-a-Service that has compromised…

Comments Off on FBI Releases IOCs Associated with BlackCat/ALPHV Ransomware

AA22-110A: Russian State-Sponsored and Criminal Cyber Threats to Critical Infrastructure

Original release date: April 20, 2022SummaryActions critical infrastructure organizations should implement to immediately protect against Russian state-sponsored and criminal cyber threats: • Patch all systems. Prioritize patching known exploited vulnerabilities.…

Comments Off on AA22-110A: Russian State-Sponsored and Criminal Cyber Threats to Critical Infrastructure