CISA Adds Nine Known Exploited Vulnerabilities to Catalog

Original release date: February 15, 2022CISA has added nine new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence that threat actors are actively exploiting the vulnerabilities listed in…

Comments Off on CISA Adds Nine Known Exploited Vulnerabilities to Catalog

FBI and USSS Release Advisory on BlackByte Ransomware

Original release date: February 15, 2022The Federal Bureau of Investigation (FBI) and the United States Secret Service (USSS) have released a joint Cybersecurity Advisory (CSA) identifying indicators of compromise associated with…

Comments Off on FBI and USSS Release Advisory on BlackByte Ransomware

Vulnerability Summary for the Week of February 7, 2022

Original release date: February 14, 2022  High Vulnerabilities Primary Vendor -- Product Description Published CVSS Score Source & Patch Info [gwa]_autoresponder_project -- [gwa]_autoresponder Unauthenticated SQL Injection (SQLi) vulnerability discovered in…

Comments Off on Vulnerability Summary for the Week of February 7, 2022

AA22-040A: 2021 Trends Show Increased Globalized Threat of Ransomware

Original release date: February 9, 2022SummaryImmediate Actions You Can Take Now to Protect Against Ransomware: • Update your operating system and software. • Implement user training and phishing exercises to raise awareness…

Comments Off on AA22-040A: 2021 Trends Show Increased Globalized Threat of Ransomware

2021 Trends Show Increased Globalized Threat of Ransomware

Original release date: February 9, 2022CISA, the Federal Bureau of Investigation (FBI), the National Security Agency (NSA), the Australian Cyber Security Centre (ACSC), and the United Kingdom’s National Cyber Security…

Comments Off on 2021 Trends Show Increased Globalized Threat of Ransomware

Vulnerability Summary for the Week of January 31, 2022

Original release date: February 7, 2022  High Vulnerabilities Primary Vendor -- Product Description Published CVSS Score Source & Patch Info advantech -- deviceon/iedge A privilege escalation vulnerability exists in the…

Comments Off on Vulnerability Summary for the Week of January 31, 2022

CISA Adds One Known Exploited Vulnerability to Catalog

Original release date: February 4, 2022CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence that threat actors are actively exploiting the vulnerabilities listed in…

Comments Off on CISA Adds One Known Exploited Vulnerability to Catalog

CISA Releases Security Advisory for Airspan Networks Mimosa

Original release date: February 3, 2022CISA has released an Industrial Controls Systems Advisory (ICSA) that details vulnerabilities in the Airspan Networks Mimosa product line. An attacker could exploit these vulnerabilities…

Comments Off on CISA Releases Security Advisory for Airspan Networks Mimosa