Warnings

Microsoft has released security updates to address vulnerabilities in multiple products. A cyber threat actor could exploit some of these vulnerabilities to take control of an affected system.

Apple has released security updates for Safari, iOS and iPadOS, Sonoma, Ventura, and Monterey to address multiple vulnerabilities. A cyber threat actor could exploit one of these vulnerabilities to take control of an affected system. Read more

От средата на миналия месец се наблюдават атаки към правителствени организации от цял свят, които използват уязвимост в WinRAR версии до 6.23. Уязвимостта (CVE-2023-38831) е в имплементирането на ShellExecute в WinRAR. Изразява се в подправяне на архив по начин, който да съдържа файл с разширение, завършващо с интервали и директория със същото име, а в … Read more

Apple has released security updates to address vulnerabilities within Safari, macOS Sonoma, iOS, and iPadOS. A cyber threat actor could exploit one of these vulnerabilities to take control of an affected system. Read more

Adobe released security updates addressing vulnerabilities affecting unpatched ColdFusion software. Exploitation of some of these vulnerabilities may allow a malicious cyber actor to take control of an affected system. Read more

Mozilla has released security updates to address vulnerabilities in Firefox and Thunderbird. A cyber threat actor could exploit some of these vulnerabilities to take control of an affected system. Read more

Juniper released a security advisory to address multiple vulnerabilities affecting Juniper Secure Analytics. A cyber threat actor could exploit one of these vulnerabilities to take control of an affected system.

Citrix has released security updates addressing vulnerabilities in Citrix Hypervisor 8.2 CU1 LTSR. A cyber threat actor could exploit these vulnerabilities to take control of an affected system.

VMware has released a security advisory addressing a vulnerability in VMWare Cloud Director Appliance. Cyber threat actors may exploit this vulnerability to take control of an affected system. Read more

Fortinet публикува съвети за сигурност, насочени към уязвимости във FortiClient и FortiGate. Нападател може да използва някои от тези уязвимости, за да поеме контрол над засегната система. CERT България препоръчва потребителите и администраторите да се запознаят със следните съвети за сигурност на Fortinet и да приложат препоръчаните актуализации: FG-IR-22-299: FortiClient (Windows) – Arbitrary file deletion … Read more