IS Security CERT Global

• Apple Releases Security Updates for Multiple Products
  Apple has released security updates to address vulnerabilities within Safari, macOS Sonoma, iOS, and iPadOS. A cyber threat actor could exploit one of these vulnerabilities to take control of an ... read more
• CERTFR-2023-AVI-0988 : Multiples vulnérabilités dans le noyau Linux d’Ubuntu (01 décembre 2023)
  De multiples vulnérabilités ont été découvertes dans le noyau Linux d'Ubuntu. Certaines d'entre elles permettent à un attaquant de provoquer une atteinte à la confidentialité des données, un déni de ... read more
• CERTFR-2023-AVI-0987 : Multiples vulnérabilités dans les produits Apple (01 décembre 2023)
  De multiples vulnérabilités ont été découvertes dans les produits Apple. Elles permettent à un attaquant de provoquer une atteinte à la confidentialité des données et une exécution de code arbitraire. ... read more
• CERTFR-2023-AVI-0993 : Multiples vulnérabilités dans les produits Fortinet (01 décembre 2023)
  De multiples vulnérabilités ont été découvertes dans les produits Fortinet. Elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance et un déni de service à ... read more
• CERTFR-2023-AVI-0992 : Vulnérabilité dans SolarWinds Platform (01 décembre 2023)
  Une vulnérabilité a été découverte dans SolarWinds Platform. Elle permet à un attaquant de provoquer une atteinte à la confidentialité des données. ... read more
• CERTFR-2023-AVI-0991 : Multiples vulnérabilités dans GitLab (01 décembre 2023)
  De multiples vulnérabilités ont été découvertes dans GitLab. Certaines d'entre elles permettent à un attaquant de provoquer une élévation de privilèges, une atteinte à l'intégrité des données et une atteinte ... read more
• CERTFR-2023-AVI-0990 : Multiples vulnérabilités dans les produits IBM (01 décembre 2023)
  De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquant de provoquer un contournement de la politique de sécurité, une atteinte à l'intégrité ... read more
• CERTFR-2023-AVI-0989 : Multiples vulnérabilités dans le noyau Linux de RedHat (01 décembre 2023)
  De multiples vulnérabilités ont été découvertes dans le noyau Linux de RedHat. Elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une atteinte à la ... read more
• Zyxel retter 15 sikkerhedsfejl
  Zyxel har udsendt advarsler om kritiske sårbarheder i firewalls, access points og NAS-enheder. Konkret er der tale om mindst 15 fejl i forskellige produkter, som risikerer command injection, DoS-angreb og ... read more
• JVN: Ruckus Access Point におけるクロスサイトスクリプティングの脆弱性
  Ruckus Access Point には、クロスサイトスクリプティングの脆弱性が存在します。続きを読む ... read more
• JVN: 横河電機製STARDOMにおけるリソース枯渇の脆弱性
  横河電機製STARDOMには、リソース枯渇の脆弱性が存在します。続きを読む ... read more
• お知らせ：CyberNewsFlash「Apple製品のアップデートについて（2023年12月）」
  ... read more
• Multiple Vulnerabilities Affecting Web-Based Court Case and Document Management Systems
  CISA has assisted a researcher with coordinating the disclosure of multiple researcher-discovered vulnerabilities affecting web-based case and document management systems used by multiple state, county, and municipal courts. Affected systems ... read more
• Terminology: it's not black and white
  The NCSC now uses 'allow list' and 'deny list' in place of 'whitelist' and 'blacklist'. Emma W explains why ... read more
• NCSC IT: How the NCSC built its own IT system
  The first in a series of blogs about how we built an OFFICIAL IT system to meet the needs of the NCSC. ... read more
• Afskedsinterview med Henrik Larsen
  Når det gamle år rinder ud, vil Henrik ikke længere være at finde på sin vante plads i DeiCs organisation som chef for DKCERT. Sprog Dansk Keywords: DKCERTDeiCLæs mere om ... read more
• Center for cybersikkerhed udgiver vejledning om 0-dagssårbarheder
  Det giver Center for Cybersikkerhed en forklaring på i en temaartikel, som centeret har publiceret på sin hjemmeside i mandags. Sprog Dansk Keywords: 0-dagssårbarhedcfcsLæs mere om Center for cybersikkerhed udgiver vejledning ... read more
• DKCERTs chef Henrik Larsen takker af
  Chefen for DKCERT gennem næsten ni år stopper med udgangen af december for at gå på pension. Sprog Dansk Keywords: DKCERTLæs mere om DKCERTs chef Henrik Larsen takker af ... read more
• ESB-2023.7184 – [RedHat] firefox: CVSS (Max): 7.5
  -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.7184 firefox security update 30 November 2023 =========================================================================== AusCERT Security Bulletin Summary --------------------------------- Product: firefox Publisher: Red Hat ... read more
• ESB-2023.7173 – [RedHat] OpenShift Container Platform 4.11.54: CVSS (Max): 7.5
  -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.7173 OpenShift Container Platform 4.11.54 security and extras update 30 November 2023 =========================================================================== AusCERT Security Bulletin Summary --------------------------------- ... read more
• ESB-2023.7182 – [RedHat] squid: CVSS (Max): 8.6
  -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.7182 squid security update 30 November 2023 =========================================================================== AusCERT Security Bulletin Summary --------------------------------- Product: squid Publisher: Red Hat ... read more
• ESB-2023.7171 – [RedHat] OpenShift Container Platform 4.11.54: CVSS (Max): 7.5
  -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.7171 OpenShift Container Platform 4.11.54 packages and security update 30 November 2023 =========================================================================== AusCERT Security Bulletin Summary --------------------------------- ... read more
• ESB-2023.7183 – [RedHat] thunderbird: CVSS (Max): 7.5
  -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.7183 thunderbird security update 30 November 2023 =========================================================================== AusCERT Security Bulletin Summary --------------------------------- Product: thunderbird Publisher: Red Hat ... read more
• ESB-2023.7187 – [RedHat] OpenShift Container Platform 4.14.4: CVSS (Max): 7.5
  -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.7187 OpenShift Container Platform 4.14.4 packages and security update 30 November 2023 =========================================================================== AusCERT Security Bulletin Summary --------------------------------- ... read more
• ESB-2023.7176 – [RedHat] OpenShift Container Platform 4.13.24: CVSS (Max): 7.5
  -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.7176 OpenShift Container Platform 4.13.24 security and extras update 30 November 2023 =========================================================================== AusCERT Security Bulletin Summary --------------------------------- ... read more
• ESB-2023.7169 – [Ubuntu] pysha3: CVSS (Max): 9.8
  -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.7169 USN-6525-1: pysha3 vulnerability 30 November 2023 =========================================================================== AusCERT Security Bulletin Summary --------------------------------- Product: pysha3 Publisher: Ubuntu Operating ... read more
• ESB-2023.7190 – [SUSE] python-azure-storage-queue: CVSS (Max): 4.7
  -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.7190 Security update for python-azure-storage-queue 30 November 2023 =========================================================================== AusCERT Security Bulletin Summary --------------------------------- Product: python-azure-storage-queue Publisher: SUSE ... read more
• ESB-2023.7165 – [Ubuntu] GIMP: CVSS (Max): 7.8
  -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.7165 USN-6521-1: GIMP vulnerabilities 30 November 2023 =========================================================================== AusCERT Security Bulletin Summary --------------------------------- Product: GIMP Publisher: Ubuntu Operating ... read more
• ESB-2023.7185 – [RedHat] thunderbird: CVSS (Max): 7.5
  -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.7185 thunderbird security update 30 November 2023 =========================================================================== AusCERT Security Bulletin Summary --------------------------------- Product: thunderbird Publisher: Red Hat ... read more
• ESB-2023.7189 – [RedHat] OpenShift Container Platform 4.14.4 security and extras: CVSS (Max): 7.5
  -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.7189 OpenShift Container Platform 4.14.4 security and extras update 30 November 2023 =========================================================================== AusCERT Security Bulletin Summary --------------------------------- ... read more
• ESB-2023.7191 – [SUSE] python-Twisted: CVSS (Max): 5.9
  -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.7191 Security update for python-Twisted 30 November 2023 =========================================================================== AusCERT Security Bulletin Summary --------------------------------- Product: python-Twisted Publisher: SUSE ... read more
• ESB-2023.7174 – [RedHat] OpenShift Container Platform 4.13.24: CVSS (Max): 7.5
  -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.7174 OpenShift Container Platform 4.13.24 packages and security update 30 November 2023 =========================================================================== AusCERT Security Bulletin Summary --------------------------------- ... read more
• ESB-2023.7167 – [Ubuntu] u-boot-nezha: CVSS (Max): 7.8
  -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.7167 USN-6523-1: u-boot-nezha vulnerability 30 November 2023 =========================================================================== AusCERT Security Bulletin Summary --------------------------------- Product: u-boot-nezha Publisher: Ubuntu Operating ... read more
• ESB-2023.7186 – [RedHat] firefox: CVSS (Max): 7.5
  -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.7186 firefox security update 30 November 2023 =========================================================================== AusCERT Security Bulletin Summary --------------------------------- Product: firefox Publisher: Red Hat ... read more
• ESB-2023.7178 – [RedHat] postgresql:13: CVSS (Max): 8.8
  -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.7178 postgresql:13 security update 30 November 2023 =========================================================================== AusCERT Security Bulletin Summary --------------------------------- Product: postgresql:13 Publisher: Red Hat ... read more
• ESB-2023.7177 – [RedHat] postgresql:13: CVSS (Max): 8.8
  -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.7177 postgresql:13 security update 30 November 2023 =========================================================================== AusCERT Security Bulletin Summary --------------------------------- Product: postgresql:13 Publisher: Red Hat ... read more
• Potentiel aktiv udnyttelse af Exchange Server-sårbarhed
  En sårbarhed i Microsoft Exchange Server, der blev patchet i forbindelse med septembers Patch Tuesday, har angiveligt 'fået' en proof-of-concept exploit. Det skriver Security Online Info på baggrund af en ... read more
• Kritisk fejl i ownCloud-fildelingsapp
  Fildelingssoftwaren ownCloud advarer om tre kritiske sårbarheder, hvoraf den ene kan afsløre administratoradgangskoder og mailserver-legitimationsoplysninger. Det skriver Bleeping Computer og The Hacker News. Den ene sårbarhed med id’et CVE-2023-49103 har ... read more
• 0-dagssårbarhed i Google Chrome rettet
  Google har rettet 0-dagssårbarhed og udsendt en ’nødsikkerhedsopdatering’ for at imødegå igangværende udnyttelse. Det skriver Bleeping Computer og, The Hacker News her onsdag morgen, og en række andre medier vil ... read more
• Dell Security Update
  Dell has released security updates to address vulnerabilities in its multiple products. Exploitation of these vulnerabilities may allow an attacker to take control of an affected systems. Users and Administrators ... read more
• Red Hat Security Update
  Red Hat has released security updates to address vulnerabilities in Red Hat multiple packages. Exploitation of these vulnerabilities may allow an attacker to take control of an affected system. Users ... read more
• Mageia Security Update
  Mageia has released security updates address vulnerabilities in Its multiple products. Exploitation of these vulnerabilities may allow an attacker to take control of an affected system. Users and Administrators are ... read more
• Chrome Security Update
  Google has released security updates to address vulnerabilities in Chrome products. Exploitation of these vulnerabilities may allow an attacker to take control of an affected system. Users and Administrators are ... read more
• Oracle Linux Security Update
  Oracle Linux has released security updates to address vulnerabilities in Oracle Linux OS. Exploitation of these vulnerabilities may allow an attacker to take control of an affected system. Users and ... read more
• SUSE Security Update
  SUSE has released security updates to address vulnerabilities in SUSE OS. Exploitation of these vulnerabilities may allow an attacker to take control of an affected system. Users and Administrators are ... read more
• Ubuntu Security Update
  Ubuntu has released security updates to address vulnerabilities in its multiple products. Exploitation of these vulnerabilities may allow an attacker to take control of an affected system. Users and Administrators ... read more
• Bluetooth Security Update
  Bluetooth SIG has released security note to address the Bluetooth Forward and Future Secrecy Attacks and Defenses (BLUFFS)” Vulnerability. Exploitation of this vulnerability may allow an attacker to conduct Man ... read more
• IBM Security Update
  IBM has released security updates to address vulnerabilities in its multiple products. Exploitation of these vulnerabilities may allow an attacker to take control of an affected system. Users and Administrators ... read more
• NetGear Security Update
  NetGear has released security updates to address vulnerabilities in its multiple products. Exploitation pf these vulnerabilities may allow an attacker to take control of an affected system. Users and Administrators ... read more
• The Cybersecurity of Quantum Computing: 6 Areas of Research
  Research and development of quantum computers continues to grow at a rapid pace. The U.S. government alone spent more than $800 million on quantum information science research in 2022. Thomas ... read more