CND News and Blog

New Alerts for Microsoft Edge (Exploit), IBM, and ABB. SecurityWizardry.com - Vulnerability Details Security Wizardry Radar Page provides vulnerability details and visibility for a variety of software and industries. https://www.securitywizardry.com/index.php/the-radar-page/alert-details#alerts Security Wizardry Cyber Threat Intelligence - The Rada...

New Alerts for Softing, Advantech, Google Chrome (Exploit), NETGEAR, NetApp, and Linux.    The NETGEAR bulletins (31 of them) cover several years of vulnerabilities and a wide variety of products.  If you have NETGEAR, it's definitely worth a look. NETGEAR Product Security | NETGEAR https://www.netgear.com/about/security/ SecurityWiz...

New Alerts for Cisco, EIP Stack Group, IBM, Dell, HPE, and Linux. SecurityWizardry.com - Vulnerability Details Security Wizardry Radar Page provides vulnerability details and visibility for a variety of software and industries. https://www.securitywizardry.com/index.php/the-radar-page/alert-details#alerts Security Wizardry Cyber Threat Intelligence...

New Alerts for ThroughTek (Exploit), Automation Direct, Wibu Systems, SonicWall, Microsoft, and Linux.    Note the ThroughTek exploit has been patched, but it is an SDK embedded in IP Cameras, and the camera manufacturers aren't patching.  Surprised? SecurityWizardry.com - Vulnerability Details Security Wizardry Radar Page provi...

New Alerts for Apple (Exploit), Dell, SonicWall, IBM, and Linux. SecurityWizardry.com - Vulnerability Details Security Wizardry Radar Page provides vulnerability details and visibility for a variety of software and industries. https://www.securitywizardry.com/index.php/the-radar-page/alert-details#alerts Security Wizardry Cyber Threat Intelligence ...

New Alerts for Microsoft Edge and Linux. SecurityWizardry.com - Vulnerability Details Security Wizardry Radar Page provides vulnerability details and visibility for a variety of software and industries. https://www.securitywizardry.com/index.php/the-radar-page/alert-details#alerts Security Wizardry Cyber Threat Intelligence - The Radar Page https:/...

New Alerts for ZOLL, AGG Software, Dell (Exploit), QNAP, and NetApp. SecurityWizardry.com - Vulnerability Details Security Wizardry Radar Page provides vulnerability details and visibility for a variety of software and industries. https://www.securitywizardry.com/index.php/the-radar-page/alert-details#alerts Security Wizardry Cyber Threat Intellige...

Monthly Patches are out for Palo Alto Networks. New Alerts for Google Chrome (Exploit), Dell (Exploit), BD, NETGEAR, and Linux.    The BD alert is concerning, they're investigating VMware vulnerabilities in their products from Oct 2020.  How about those May 2021 ones that are under active exploit? SecurityWizardry.com - Vulnerability...

New Alerts for Bosch, IBM, McAfee, and Linux. SecurityWizardry.com - Vulnerability Details Security Wizardry Radar Page provides vulnerability details and visibility for a variety of software and industries. https://www.securitywizardry.com/index.php/the-radar-page/alert-details#alerts Security Wizardry Cyber Threat Intelligence - The Radar Page ht...

Monthly Patches are out for Qualcomm, Google Android, Google Pixel, Samsung, Siemens, and SAP. New Alert for Dell.  Dell is just patching the actively exploited VMware vulnerabilities, so look lively.     This afternoon Monthly Patches are expected for Microsoft, Adobe, and Schneider Electric.     Xen has several secur...

New Alerts for Microsoft Edge, Trend Micro, IBM, Dell, and Linux. Tomorrow is Patch Day for 10 vendors.    Tomorrow is Patch Day, and due to the way the calendar fell this month, we expect Qualcomm, Android, Pixel, Samsung, Microsoft, Adobe, SAP, Siemens, and Schneider Electric all to put out patches tomorrow.  Just to add to the fun...

New Alerts for Advantech, Mozilla, IBM, and NetApp.      Adobe has put out a prenotification bulletin for Acrobat and Reader, for the patches coming out next week. Adobe Security Bulletin Security update available for Adobe Acrobat and Reader | APSB21-09 https://helpx.adobe.com/security/products/acrobat/apsb21-37.html Secur...

New Alerts for Cisco, HPE, Dell, F-Secure, Apache, Fortinet, Wireshark, QNAP and Linux. SecurityWizardry.com - Vulnerability Details Security Wizardry Radar Page provides vulnerability details and visibility for a variety of software and industries. https://www.securitywizardry.com/the-radar-page/alert-details Security Wizardry Cyber Threat Intelli...

New Alerts for Mozilla, McAfee, Fortinet, and Linux.      Either Qualcomm/Android/Pixel/Samsung patches come out this afternoon, or next week's Patch Tuesday will be a special one with 9 vendors instead of just 5.  This happens because Qualcomm comes out first Monday, followed by Android/Pixel/Samsung on the first Tuesday. ...

New Alerts for Yokogawa, Korenix, HCL Software, and Linux. SecurityWizardry.com - Vulnerability Details Security Wizardry Radar Page provides vulnerability details and visibility for a variety of software and industries. https://www.securitywizardry.com/index.php/the-radar-page/alert-details#alerts Security Wizardry Cyber Threat Intelligence - The ...

New Alerts for IBM and Linux. SecurityWizardry.com - Vulnerability Details Security Wizardry Radar Page provides vulnerability details and visibility for a variety of software and industries https://www.securitywizardry.com/index.php/the-radar-page/alert-details#alerts Security Wizardry Cyber Threat Intelligence - The Radar Page . https://radar.sec...

New Alerts for GENIVI, Mesa Labs, Commscope, Bosch, Siemens, IBM, Microsoft Edge, and NetApp.  SecurityWizardry.com - Vulnerability Details Security Wizardry Radar Page provides vulnerability details and visibility for a variety of software and industries. https://www.securitywizardry.com/the-radar-page/alert-details#alerts Security Wizardry C...

New Alerts for Mitsubishi Electric, Moxa, B&R Automation, and Linux (Red Hat). SecurityWizardry.com - Vulnerability Details Security Wizardry Radar Page provides vulnerability details and visibility for a variety of software and industries. https://www.securitywizardry.com/index.php/the-radar-page/alert-details#alerts Security Wizardry Cyber Th...

New Alerts for VMware (repeated from last night), Google Chrome, curl, Spacelabs Healthcare, Rockwell Automation, and Linux.      The Rockwell Automation vulnerability, although only a CVSSv3 score of 6.1, is impressive that to recover from the DoS vulnerability you must flash the firmware, losing all customer configuration and data....

New Alerts for Apple (exploit) and IBM.    Devices supporting Bluetooth Core and Mesh Specifications are vulnerable to impersonation attacks and AuthValue disclosure. VU#799380 - Devices supporting Bluetooth Core and Mesh Specifications are vulnerable to impersonation attacks and AuthValue disclosure https://www.kb.cert.org/vuls/id/7...