Drupal Releases Multiple Security Updates

Original release date: September 16, 2021Drupal has released security updates to address multiple vulnerabilities affecting Drupal 8.9, 9.1, and 9.2. An attacker could exploit some of these vulnerabilities to take…

Comments Off on Drupal Releases Multiple Security Updates

Vulnerability Summary for the Week of September 6, 2021

Original release date: September 13, 2021  High Vulnerabilities Primary Vendor -- Product Description Published CVSS Score Source & Patch Info adaptivescale -- lxdui A Hardcoded JWT Secret Key in metadata.py…

Comments Off on Vulnerability Summary for the Week of September 6, 2021

Apple Releases Security Updates to Address CVE-2021-30858 and CVE-2021-30860

Original release date: September 13, 2021Apple has released security updates to address vulnerabilities—CVE-2021-30858 and CVE-2021-30860—in multiple products.  An attacker could exploit these vulnerabilities to take control of an affected device.…

Comments Off on Apple Releases Security Updates to Address CVE-2021-30858 and CVE-2021-30860

CISA’s Annual National Cybersecurity Summit

Original release date: September 13, 2021CISA will host its fourth annual National Cybersecurity Summit on Wednesdays during the month of October. The 2021 Summit will be held as a series…

Comments Off on CISA’s Annual National Cybersecurity Summit

Microsoft Releases Mitigations and Workarounds for CVE-2021-40444

Original release date: September 7, 2021Microsoft has released mitigations and workarounds to address a remote code execution vulnerability (CVE-2021-40444) in Microsoft Windows. Exploitation of this vulnerability may allow a remote…

Comments Off on Microsoft Releases Mitigations and Workarounds for CVE-2021-40444

Vulnerability Summary for the Week of August 30, 2021

Original release date: September 6, 2021  High Vulnerabilities Primary Vendor -- Product Description Published CVSS Score Source & Patch Info atlassian -- confluence In affected versions of Confluence Server and…

Comments Off on Vulnerability Summary for the Week of August 30, 2021

Cisco Releases Security Updates for Cisco Enterprise NFVIS

Original release date: September 2, 2021Cisco has released security updates to address a critical vulnerability affecting Cisco Enterprise Network Function Virtualization Infrastructure Software (NFVIS) Release 4.5.1. A remote attacker could…

Comments Off on Cisco Releases Security Updates for Cisco Enterprise NFVIS

AA21-243A: Ransomware Awareness for Holidays and Weekends

Original release date: August 31, 2021SummaryImmediate Actions You Can Take Now to Protect Against Ransomware • Make an offline backup of your data. • Do not click on suspicious links.…

Comments Off on AA21-243A: Ransomware Awareness for Holidays and Weekends