Monthly Patches are out for Microsoft and Adobe. New Alerts for Rockwell Automation, IBM, Dell, Hitachi, and Linux.
Microsoft Exploit
Microsoft Monthly Patches are out, with patches for 88 vulnerabilities, 6 are Critical, and 2 are being exploited. Highest CVSSv3 score of 9.8
More info. And here. And here.
Adobe Monthly Patches include patches for Acrobat and Reader, Commerce, Dimension, and XMP Toolkit SDK. Highest CVSSv3 score of 9.1
More info.
A vulnerability was discovered in Armor PowerFlex when the product sends communications to the local event log. A remote attacker could exploit this vulnerability by sending an influx of network commands, causing the product to generate an influx of event log traffic at a high rate, resulting in a DoS. CVSSv3 score of 8.6
More info.
IBM Security Guardium has been updated to fix multiple vulnerabilities. Highest CVSSv3 score of 9.8
More info.
Dell SmartFabric Storage Software contains an improper input validation vulnerability. CVSSv3 score of 9.8 Dell rates this Critical.
More info.
Dell Networking Switches running Enterprise SONiC contain an improper input validation vulnerability. CVSSv3 score of 9.8 Dell rates this Critical.
More info.
Dell Connectrix (Brocade) remediation is available for Fabric OS multiple security vulnerabilities. Dell rates this Critical.
More info.
Dell EMC Connectrix B-Series remediation is available for Linux Kernel vulnerabilities. Dell rates this Critical.
More info.
Dell SmartFabric OS10 remediation is available for multiple security vulnerabilities. Highest CVSSv3 score of 9.8 Dell rates this Critical.
More info.
Dell Networking MX Series Switches remediation is available for multiple security vulnerabilities. Highest CVSSv3 score of 9.8 Dell rates this Critical.
More info.
Hitachi has published updates for Command Suite, Automation Director, Configuration Manager, Infrastructure Analytics Advisor, Ops Center, and Cosminexus.
More info.
Amazon Linux has updated the kernel. More info.
Amazon Linux 2 has updated the kernel and firmware. More info.
Security Wizardry Cyber Threat Intelligence - The Radar Page
Security Wizardry Cyber Threat Intelligence - The Mobile Radar Page