Browsing Category
Threat Advisories
39 posts
Briefings on the latest cybersecurity threats, vulnerabilities, and critical action items for security practitioners.
Critical RCE Vulnerability in Palo Alto Global Protect Firewall Affects Estimated 10,000 VPNs
Randori, a red team cybersecurity company, officially disclosed a zero-day memory corruption vulnerability within the Palo Alto Global…
High-Priority, Actively-Exploited Vulnerabilities Patched in Exchange and Excel
Microsoft’s Patch Tuesday for November 2021 fixed 55 bugs across several products, six of which are rated critical.…
Cisco Patches Vulnerabilities Across Multiple Product Lines
Oct 27, 2021 22:30 GMT Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) are the most…
Microsoft warns of continued supply chain attacks leveraging service providers and product resellers
Recent nation state attacks are proving that compromising a company through vendor relationships is the new normal. Background…
Oracle releases October Critical Patch Update for all product lines
Urgent action is required to apply the critical patch updates, as Oracle products are everywhere and threat actors…
October Patch Tuesday Updates More Than 40 Microsoft Products and Technologies
Microsoft has patched a host of vulnerabilities, including three rated “critical” and one actively being exploited by nation…
Apple Releases Updates to Actively Exploited iOS and iPadOS Vulnerability
The vulnerability allows for arbitrary code execution at kernel level permissions and appears to be actively leveraged by…
Apache Patches Actively Exploited Directory Traversal Flaw In Popular HTTP Server
The popular Apache HTTP Server has received an update to patch a directory traversal vulnerability on versions 2.4.49 and 2.4.50,…
GitLab Security Updates Patch Dozens of Newly Disclosed Vulnerabilities
Multiple high-rated Cross-Site Scripting (XSS) vulnerabilities that allow for arbitrary JavaScript Execution are among the many vulnerabilities patched…
Hikvision Cameras RCE Vulnerability Requires a Firmware Update
On September 19, 2021, Hikvision released a security advisory (CVE-2021-36260) regarding an unauthenticated remote code execution vulnerability reported…