CND News and Blog

Monthly Patches are out for Siemens, Schneider Electric, and SAP. New Alerts for Google Chrome, Dell, Check Point, and Mitsubishi Electric. Microsoft and Adobe patches are due out later today. SecurityWizardry.com - Vulnerability Details Security Wizardry Radar Page provides vulnerability details and visibility for a variety of software and industr...

New Alerts for Dräger, B&R, and Linux. SecurityWizardry.com - Vulnerability Details Security Wizardry Radar Page provides vulnerability details and visibility for a variety of software and industries. https://www.securitywizardry.com/the-radar-page/alert-details#alerts Security Wizardry Cyber Threat Intelligence - The Radar Page https://radar.s...

New Alerts for ABB, Trend Micro, IBM, NetApp, and Mozilla.    Adobe has published a pre-notification for Patch Tuesday for Adobe Acrobat and Reader.  Priority 1 vulnerabilities, meaning likely being targeted and/or exploited. Adobe Security Bulletin Security update available for Adobe Acrobat and Reader | APSB21-09 https://helpx.adob...

New Alerts for Cisco, VMware, WAGO, Mozilla, HCL Software, and Linux.The WAGO bulletin is for CVSS score of 10, VMware, Cisco, and HACL Software both have 9.8.  SecurityWizardry.com - Vulnerability Details Security Wizardry Radar Page provides vulnerability details and visibility for a variety of software and industries. https://www.securitywi...

New Alerts for Advantech, Exim, Synology, Apple (Exploit), and Linux. SecurityWizardry.com - Vulnerability Details Security Wizardry Radar Page provides vulnerability details and visibility for a variety of software and industries. https://www.securitywizardry.com/index.php/the-radar-page/alert-details#alerts Security Wizardry Cyber Threat Intellig...

Monthly Patches are out for mobile devices, including Qualcomm, Google Android, Google Pixel, and Samsung. New Alerts for Pulse Secure, Apple (Exploit), and Weidmüller.Pulse Secure VPN has 3 new vulerabilities, likely exploited as well.  There is finally a software fix for all this mess. SecurityWizardry.com - Vulnerability Details Security Wi...

New alerts for NETGEAR, IBM, and Linux. SecurityWizardry.com - Vulnerability Details Security Wizardry Radar Page provides vulnerability details and visibility for a variety of software and industries. https://www.securitywizardry.com/index.php/the-radar-page/alert-details#alerts Security Wizardry Cyber Threat Intelligence - The Radar Page https://...

New Alerts for Microsoft Edge, multiple RTOS, Texas Instruments, HPE, Bosch, B&R, and NetApp. SecurityWizardry.com - Vulnerability Details Security Wizardry Radar Page provides vulnerability details and visibility for a variety of software and industries. https://www.securitywizardry.com/index.php/the-radar-page/alert-details#alerts Security Wi...

New Alerts for F5, Cisco, CODESYS, QNAP, and BIND.    One of the CODESYS vulnerabilities allows an attacker to change the addressing scheme on the router... Heh. SecurityWizardry.com - Vulnerability Details Security Wizardry Radar Page provides vulnerability details and visibility for a variety of software and industries. https://www.secu...

New Alerts for Fortinet, Citrix, IBM, Moxa, Beckhoff Automation, and Linux. SecurityWizardry.com - Vulnerability Details Security Wizardry Radar Page provides vulnerability details and visibility for a variety of software and industries. https://www.securitywizardry.com/index.php/the-radar-page/alert-details#alerts Security Wizardry Cyber Threat In...

New Alerts for Google Chrome, Click Studios, Apple, and Kaspersky.    The Apple fix includes a fix for sideloaded apps taking control of macOS. Update Your Mac Now: The ‘Worst Hack In Years’ Hits Apple Computers https://www.forbes.com/sites/thomasbrewster/2021/04/26/update-your-mac-now-the-worst-hack-in-years-hits-apple-computers/?fbclid=...

New Alerts for MB connect line, Yokogawa, Rockwell Automation, Shibboleth, and Hitachi. SecurityWizardry.com - Vulnerability Details Security Wizardry Radar Page provides vulnerability details and visibility for a variety of software and industries. https://www.securitywizardry.com/index.php/the-radar-page/alert-details#alerts Security Wizardry Cyb...

New Alerts for Bosch, Microsoft Edge, Apple, IBM, Micro Focus, and NetApp.I thought today was Saturday for the first 30 minutes I was up...  Boo.  SecurityWizardry.com - Vulnerability Details Security Wizardry Radar Page provides vulnerability details and visibility for a variety of software and industries. https://www.securitywizardry.co...

New Alerts for Mitsubishi Electric, IBM, HCL Software, QNAP, Wireshark, and Linux. SecurityWizardry.com - Vulnerability Details Security Wizardry Radar Page provides vulnerability details and visibility for a variety of software and industries. https://www.securitywizardry.com/index.php/the-radar-page/alert-details#alerts Security Wizardry Cyber Th...

New Alerts for Pulse Secure VPN (0-Day, Exploited), Delta Industrial Automation, Aruba, TIBCO, Google Chrome (0-Day).    Don't forget yesterday's Oracle Quarterly Patches too. SecurityWizardry.com - Vulnerability Details Security Wizardry Radar Page provides vulnerability details and visibility for a variety of software and industries. ht...

Updated to add:   Oracle Quarterly Patches are out.  390 vulns, 221 remotely exploitable without authentication.New Alerts for Meinberg, Apache OpenOffice, IBM, Dell, SonicWall (0-Day), and Linux.    The SonicWall 0-Day is in the Email hosted and appliance solutions, a Pre-Authentication vulnerability that allows creation of an ...

New Alerts for QNAP, GitLab, IBM, NetApp, and Mozilla. SecurityWizardry.com - Vulnerability Details Security Wizardry Radar Page provides vulnerability details and visibility for a variety of software and industries. https://www.securitywizardry.com/index.php/the-radar-page/alert-details#alerts Security Wizardry Cyber Threat Intelligence - The Rada...

New Alerts for EIPStackGroup, Microsoft Edge, McAfee, F5, QNAP, and Linux.   The Oracle Pre-Release for next week's Quarterly Patches are out if you want to get an idea of how hard you'll be hit. Oracle Critical Patch Update Advisory - April 2021 Oracle Critical Patch Update Advisory - April 2021 https://www.oracle.com/security-alerts/cpuapr20...

Monthly Patches are out for Palo Alto Networks. Quarterly Patches are out for Juniper Networks. New Alerts for Microsoft Edge, IBM, Dell, and Google Chrome.     Juniper Networks had 60 bulletins, one for hard-coded credentials CVSSv3 score of 10.Google Chrome has 37 new security fixes.IBM had many bulletins. SecurityWizardry.com...

Monthly Patches are out for Microsoft (Exploit) and Adobe. New Alerts for JTEKT, Advantech, Google Chrome (Exploit), DNS (Exploit), OpenClinic GA (Exploit), and Linux.     Monthly Patches are expected this afternoon for Palo Alto Networks.   Quarterly Patches are expected for Juniper Networks.There are 3 vendors on the list for tomor...