CND News and Blog

New Alerts for IBM and Advantech. SecurityWizardry.com - Vulnerability Details Security Wizardry Radar Page provides vulnerability details and visibility for a variety of software and industries. https://www.securitywizardry.com/index.php/the-radar-page/alert-details#alerts Security Wizardry Cyber Threat Intelligence - The Radar Page https://radar....

New Alerts for GE, Microsoft, Johnson Controls, Philips, IBM, and Linux. Microsoft has published updates for another version of Exchange Server, as well as updates for Office for Mac and Python in Visual Studio.Microsoft has published Guidance for Responders: Investigating and remediating on-premises Exchange Server vulnerabilities.  Guidance ...

New Alerts for Netgear, HPE, IBM, Moxa, Microsoft Edge (Exploit), Microsoft, HCL Software, F5, and Linux.Netgear has a Hardcoded Password vulnerability. Chromium-based Microsoft Edge has updated, one of the CVEs is actively being exploited.Microsoft has published a one-click Mitigation tool for the Exchange Server, which is supposed to patch (not c...

New Alerts for Google Chrome (Exploit), Sophos, NetApp, HCL Software, NetBSD, and Linux. SecurityWizardry.com - Vulnerability Details Security Wizardry Radar Page provides vulnerability details and visibility for a variety of software and industries. https://www.securitywizardry.com/index.php/the-radar-page/alert-details#alerts Security Wizardry Cy...

New Alerts for Microsoft (more Exchange Server patches), NetApp, Lepide (0-Day), and Linux. SecurityWizardry.com - Vulnerability Details Security Wizardry Radar Page provides vulnerability details and visibility for a variety of software and industries. https://www.securitywizardry.com/index.php/the-radar-page/alert-details#alerts Security Wizardry...

Palo Alto Monthly Patch set is one Medium vulnerability. New Alerts for IBM, Dell, and Wireshark. SecurityWizardry.com - Vulnerability Details Security Wizardry Radar Page provides vulnerability details and visibility for a variety of software and industries. https://www.securitywizardry.com/index.php/the-radar-page/alert-details#alerts Security Wi...

Microsoft and Adobe Monthly Patches are out. New Alert for Aruba.     Palo Alto Networks Monthly Patches are expected this afternoon. SecurityWizardry.com - Vulnerability Details Security Wizardry Radar Page provides vulnerability details and visibility for a variety of software and industries. https://www.securitywizardry.com/index.php/t...

Monthly Patches are out for SAP, Schneider Electric, and Siemens. New Alerts for Microsoft (Exchange Server), Apple, and Linux.   Microsoft and Adobe monthly patches are expected this afternoon.   Tomorrow is Palo Alto Networks monthly patch day. SecurityWizardry.com - Vulnerability Details Security Wizardry Radar Page provides vulnerabil...

New Alerts for IBM and Linux.     Tomorrow is Monthly Patch day for Microsoft, Adobe, Siemens, Schneider Electric, and SAP. SecurityWizardry.com - Vulnerability Details Security Wizardry Radar Page provides vulnerability details and visibility for a variety of software and industries. https://www.securitywizardry.com/index.php/the-ra...

New Alerts for Rockwell Automation, Microsoft Edge, and Zyxel.     TGIF! SecurityWizardry.com - Vulnerability Details Security Wizardry Radar Page provides vulnerability details and visibility for a variety of software and industries. https://www.securitywizardry.com/index.php/the-radar-page/alert-details#alerts Security Wizardry Cyber Th...

New Alerts for Cisco, Micro Focus, NetApp, Fortinet, and Linux. SecurityWizardry.com - Vulnerability Details Security Wizardry Radar Page provides vulnerability details and visibility for a variety of software and industries. https://www.securitywizardry.com/index.php/the-radar-page/alert-details#alerts Security Wizardry Cyber Threat Intelligence -...

New Alerts for Google Chrome (Exploit), Rockwell Automation, Trend Micro, HCL Software, VMware, and Linux.    Yesterday evening we published a New Alert for Microsoft Exchange Servers being compromised, an OOB patch from Microsoft, and raised a Critical Subject Alert for the over 70k Internet-facing Exchange Servers. Volexity published th...

Monthly Patches are out for Google Android, Google Pixel, and Samsung Mobile. New Alerts for Veritas, Dell, and Linux. SecurityWizardry.com - Vulnerability Details Security Wizardry Radar Page provides vulnerability details and visibility for a variety of software and industries. https://www.securitywizardry.com/index.php/the-radar-page/alert-detai...

Qualcomm Monthly Patches are out. New Alerts for SaltStack, Dell, Apache Tomcat, Synology, and Linux.  More information is available about the genua firewall vulnerability.  See the link below...   Bruce Schneier has an essay about SolarWinds, and identifies Thoma Bravo as an investor, "private-equity firms known for extreme cost-cut...

New Alerts for Microsoft, genua, ProSoft Technology, IBM, NetApp, and SUSE Linux. genua is a new company to the vulnerability review, they make firewall and Internet security products in Germany.  Can't see much without a customer login though. SecurityWizardry.com - Vulnerability Details Security Wizardry Radar Page provides vulnerability det...

New Alerts for Cisco, Rockwell Automation, and Linux. SecurityWizardry.com - Vulnerability Details Security Wizardry Radar Page provides vulnerability details and visibility for a variety of software and industries. https://www.securitywizardry.com/index.php/the-radar-page/alert-details#alerts Security Wizardry Cyber Threat Intelligence - The Radar...

New Alerts for Advantech, Mozilla, VMware, FreeBSD, IBM, and Linux.     VMware vulnerability is CVSSv3 score of 9.8 and remotely exploitable.  Take a look... SecurityWizardry.com - Vulnerability Details Security Wizardry Radar Page provides vulnerability details and visibility for a variety of software and industries. https...

New Alerts for PEPPERL+FUCHS, IBM, and Linux.    An interesting article is linked below about the SonicWall hack, and indications they may have paid a ransom for extortion. SecurityWizardry.com - Vulnerability Details Security Wizardry Radar Page provides vulnerability details and visibility for a variety of software and industries. https...

New Alerts for IBM, HCL Software, SonicWall, and Linux.    Malware on Apple's M1 chip, Silver Sparrow, has been found on nearly 30k Macs.  Apple has revoked the security certificates of the developer accounts used to sign the packages, to stop the spread.  It's still unclear exactly what this malware is supposed to do. Mysteriou...

New Alerts for Hitachi, NetApp, F5, and Linux. SecurityWizardry.com - Vulnerability Details Security Wizardry Radar Page provides vulnerability details and visibility for a variety of software and industries. https://www.securitywizardry.com/index.php/the-radar-page/alert-details#alerts Security Wizardry Cyber Threat Intelligence - The Radar Page h...