Vulnerability Summary for the Week of March 15, 2021

Original release date: March 22, 2021  High Vulnerabilities Primary Vendor -- Product Description Published CVSS Score Source & Patch Info adobe -- creative_cloud_desktop_application Adobe Creative Cloud Desktop Application version 5.3…

Comments Off on Vulnerability Summary for the Week of March 15, 2021

AA21-076A: TrickBot Malware

Original release date: March 17, 2021SummaryThis Advisory uses the MITRE Adversarial Tactics, Techniques, and Common Knowledge (ATT&CK®) framework. See the ATT&CK for Enterprise for all referenced threat actor tactics and…

Comments Off on AA21-076A: TrickBot Malware

CISA-FBI Joint Advisory on TrickBot Malware

Original release date: March 17, 2021CISA and the Federal Bureau of Investigation (FBI) have released a Joint Cybersecurity Advisory (CSA) on TrickBot malware. A sophisticated group of cyber criminals are…

Comments Off on CISA-FBI Joint Advisory on TrickBot Malware

Microsoft Releases Exchange On-premises Mitigation Tool

Original release date: March 16, 2021Microsoft has released the Exchange On-premises Mitigation Tool (EOMT.ps1) that can automate portions of both the detection and patching process. Microsoft stated the following along…

Comments Off on Microsoft Releases Exchange On-premises Mitigation Tool

Vulnerability Summary for the Week of March 8, 2021

Original release date: March 15, 2021 High Vulnerabilities Primary Vendor -- Product Description Published CVSS Score Source & Patch Info arubanetworks -- airwave A remote authenticated arbitrary command execution vulnerability…

Comments Off on Vulnerability Summary for the Week of March 8, 2021

Updates on Microsoft Exchange Server Vulnerabilities

Original release date: March 13, 2021CISA has added seven Malware Analysis Reports (MARs) to Alert AA21-062A: Mitigate Microsoft Exchange Server Vulnerabilities. Each MAR identifies a webshell associated with exploitation of…

Comments Off on Updates on Microsoft Exchange Server Vulnerabilities