CND News and Blog

New Alerts for IBM and Linux.     Tomorrow is Monthly Patch day for Microsoft, Adobe, Siemens, Schneider Electric, and SAP. SecurityWizardry.com - Vulnerability Details Security Wizardry Radar Page provides vulnerability details and visibility for a variety of software and industries. https://www.securitywizardry.com/index.php/the-ra...

New Alerts for Rockwell Automation, Microsoft Edge, and Zyxel.     TGIF! SecurityWizardry.com - Vulnerability Details Security Wizardry Radar Page provides vulnerability details and visibility for a variety of software and industries. https://www.securitywizardry.com/index.php/the-radar-page/alert-details#alerts Security Wizardry Cyber Th...

New Alerts for Cisco, Micro Focus, NetApp, Fortinet, and Linux. SecurityWizardry.com - Vulnerability Details Security Wizardry Radar Page provides vulnerability details and visibility for a variety of software and industries. https://www.securitywizardry.com/index.php/the-radar-page/alert-details#alerts Security Wizardry Cyber Threat Intelligence -...

New Alerts for Google Chrome (Exploit), Rockwell Automation, Trend Micro, HCL Software, VMware, and Linux.    Yesterday evening we published a New Alert for Microsoft Exchange Servers being compromised, an OOB patch from Microsoft, and raised a Critical Subject Alert for the over 70k Internet-facing Exchange Servers. Volexity published th...

Monthly Patches are out for Google Android, Google Pixel, and Samsung Mobile. New Alerts for Veritas, Dell, and Linux. SecurityWizardry.com - Vulnerability Details Security Wizardry Radar Page provides vulnerability details and visibility for a variety of software and industries. https://www.securitywizardry.com/index.php/the-radar-page/alert-detai...

Qualcomm Monthly Patches are out. New Alerts for SaltStack, Dell, Apache Tomcat, Synology, and Linux.  More information is available about the genua firewall vulnerability.  See the link below...   Bruce Schneier has an essay about SolarWinds, and identifies Thoma Bravo as an investor, "private-equity firms known for extreme cost-cut...

New Alerts for Microsoft, genua, ProSoft Technology, IBM, NetApp, and SUSE Linux. genua is a new company to the vulnerability review, they make firewall and Internet security products in Germany.  Can't see much without a customer login though. SecurityWizardry.com - Vulnerability Details Security Wizardry Radar Page provides vulnerability det...

New Alerts for Cisco, Rockwell Automation, and Linux. SecurityWizardry.com - Vulnerability Details Security Wizardry Radar Page provides vulnerability details and visibility for a variety of software and industries. https://www.securitywizardry.com/index.php/the-radar-page/alert-details#alerts Security Wizardry Cyber Threat Intelligence - The Radar...

New Alerts for Advantech, Mozilla, VMware, FreeBSD, IBM, and Linux.     VMware vulnerability is CVSSv3 score of 9.8 and remotely exploitable.  Take a look... SecurityWizardry.com - Vulnerability Details Security Wizardry Radar Page provides vulnerability details and visibility for a variety of software and industries. https...

New Alerts for PEPPERL+FUCHS, IBM, and Linux.    An interesting article is linked below about the SonicWall hack, and indications they may have paid a ransom for extortion. SecurityWizardry.com - Vulnerability Details Security Wizardry Radar Page provides vulnerability details and visibility for a variety of software and industries. https...

New Alerts for IBM, HCL Software, SonicWall, and Linux.    Malware on Apple's M1 chip, Silver Sparrow, has been found on nearly 30k Macs.  Apple has revoked the security certificates of the developer accounts used to sign the packages, to stop the spread.  It's still unclear exactly what this malware is supposed to do. Mysteriou...

New Alerts for Hitachi, NetApp, F5, and Linux. SecurityWizardry.com - Vulnerability Details Security Wizardry Radar Page provides vulnerability details and visibility for a variety of software and industries. https://www.securitywizardry.com/index.php/the-radar-page/alert-details#alerts Security Wizardry Cyber Threat Intelligence - The Radar Page h...

New Alerts for Cisco, Microsoft Edge, ISC BIND, Mitsubishi Electric, WebKitGTK, Johnson Controls, OpenSSL, and Linux. SecurityWizardry.com - Vulnerability Details Security Wizardry Radar Page provides vulnerability details and visibility for a variety of software and industries. https://www.securitywizardry.com/index.php/the-radar-page/alert-detail...

New Alerts for Google Chrome, QNAP, Aruba, Phoenix Contact, and Linux.An interesting side-effect of the US weather occurring at the moment, because McAfee Support appears to be based in Texas, their support center is struggling.  Good time to drop a McAfee 0-day... SecurityWizardry.com - Vulnerability Details Security Wizardry Radar Page provi...

New Alerts for PEPPERL+FUCHS, Dell, Brocade, and Linux. SecurityWizardry.com - Vulnerability Details Security Wizardry Radar Page provides vulnerability details and visibility for a variety of software and industries. https://www.securitywizardry.com/index.php/the-radar-page/alert-details#alerts Security Wizardry Cyber Threat Intelligence - The Rad...

New Alerts for PEPPERL+FUCHS and HCL Software. SecurityWizardry.com - Vulnerability Details Security Wizardry Radar Page provides vulnerability details and visibility for a variety of software and industries. https://www.securitywizardry.com/index.php/the-radar-page/alert-details#alerts Security Wizardry Cyber Threat Intelligence - The Radar Page h...

New Alerts for TCP/IP - NUMBER:JACK, F5, Microsoft, Hitachi, and NetApp. SecurityWizardry.com - Vulnerability Details Security Wizardry Radar Page provides vulnerability details and visibility for a variety of software and industries. https://www.securitywizardry.com/the-radar-page/alert-details#alerts Security Wizardry Cyber Threat Intelligence - ...

New Alerts for B&R Automation, HP, Micro Focus, and Huawei. SecurityWizardry.com - Vulnerability Details Security Wizardry Radar Page provides vulnerability details and visibility for a variety of software and industries.Security Wizardry Radar Page provides vulnerability details and visibility for a variety of software and industries. https://...

Palo Alto Networks Monthly Patches are out. New Alerts for Advantech, Westermo, Intel, Apple, Squid 0-Day, HCL Software, and Linux. SecurityWizardry.com - Vulnerability Details Security Wizardry Radar Page provides vulnerability details and visibility for a variety of software and industries. https://www.securitywizardry.com/index.php/the-radar-pag...

Adobe, Microsoft, and Schneider Electric Monthly Patches are out.Adobe and Microsoft both have patches for exploited vulnerabilities, and there is a Critical RCE in Windows DNS Server. SecurityWizardry.com - Vulnerability Details Security Wizardry Radar Page provides vulnerability details and visibility for a variety of software and industries. htt...