Cloud Security Alliance News Clipping Site

Tag: Cybersecurity and Infrastructure Security Agency

  • Alerts: Apple Releases Security Updates for Multiple Products

    —

    by

    system automation
    in

    Source URL: https://www.cisa.gov/news-events/alerts/2024/11/20/apple-releases-security-updates-multiple-products Source: Alerts Title: Apple Releases Security Updates for Multiple Products Feedly Summary: Apple released security updates to address vulnerabilities in multiple Apple products. A cyber threat actor could exploit some of these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review the following advisories and apply…

  • Alerts: 2024 CWE Top 25 Most Dangerous Software Weaknesses

    —

    by

    system automation
    in

    Source URL: https://www.cisa.gov/news-events/alerts/2024/11/20/2024-cwe-top-25-most-dangerous-software-weaknesses Source: Alerts Title: 2024 CWE Top 25 Most Dangerous Software Weaknesses Feedly Summary: The Cybersecurity and Infrastructure Security Agency (CISA), in collaboration with the Homeland Security Systems Engineering and Development Institute (HSSEDI), operated by MITRE, has released the 2024 CWE Top 25 Most Dangerous Software Weaknesses. This annual list identifies the most critical…

  • Alerts: CISA Adds Two Known Exploited Vulnerabilities to Catalog

    —

    by

    system automation
    in

    Source URL: https://www.cisa.gov/news-events/alerts/2024/11/20/cisa-adds-two-known-exploited-vulnerabilities-catalog Source: Alerts Title: CISA Adds Two Known Exploited Vulnerabilities to Catalog Feedly Summary: CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2024-38812 VMware vCenter Server Heap-Based Buffer Overflow Vulnerability CVE-2024-38813 VMware vCenter Server Privilege Escalation Vulnerability These types of vulnerabilities are frequent attack vectors…

  • Alerts: USDA Releases Success Story Detailing the Implementation of Phishing-Resistant Multi-Factor Authentication

    —

    by

    system automation
    in

    Source URL: https://www.cisa.gov/news-events/alerts/2024/11/20/usda-releases-success-story-detailing-implementation-phishing-resistant-multi-factor-authentication Source: Alerts Title: USDA Releases Success Story Detailing the Implementation of Phishing-Resistant Multi-Factor Authentication Feedly Summary: Today, the Cybersecurity and Infrastructure Security Agency (CISA) and the U.S. Department of Agriculture (USDA) released Phishing-Resistant Multi-Factor Authentication (MFA) Success Story: USDA’s FIDO Implementation. This report details how USDA successfully implemented phishing-resistant authentication for its…

  • The Register: America’s drinking water systems have a hard-to-swallow cybersecurity problem

    —

    by

    system automation
    in

    Source URL: https://www.theregister.com/2024/11/19/us_drinking_water_systems_cybersecurity/ Source: The Register Title: America’s drinking water systems have a hard-to-swallow cybersecurity problem Feedly Summary: More than 100 million rely on systems rife with vulnerabilities, says EPA OIG Nearly a third of US residents are served by drinking water systems with cybersecurity shortcomings, the Environmental Protection Agency’s Office of Inspector General found…

  • The Register: T-Mobile US ‘monitoring’ China’s ‘industry-wide attack’ amid fresh security breach fears

    —

    by

    system automation
    in

    Source URL: https://www.theregister.com/2024/11/18/tmobile_us_attack_salt_typhoon/ Source: The Register Title: T-Mobile US ‘monitoring’ China’s ‘industry-wide attack’ amid fresh security breach fears Feedly Summary: Un-carrier said to be among those hit by Salt Typhoon, including AT&T, Verizon T-Mobile US said it is “monitoring" an "industry-wide" cyber-espionage campaign against American networks – amid fears Chinese government-backed spies compromised the un-carrier…

  • Alerts: CISA Adds Three Known Exploited Vulnerabilities to Catalog

    —

    by

    system automation
    in

    Source URL: https://www.cisa.gov/news-events/alerts/2024/11/18/cisa-adds-three-known-exploited-vulnerabilities-catalog Source: Alerts Title: CISA Adds Three Known Exploited Vulnerabilities to Catalog Feedly Summary: CISA has added three new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2024-1212 Progress Kemp LoadMaster OS Command Injection Vulnerability CVE-2024-0012 Palo Alto Networks PAN-OS Management Interface Authentication Bypass Vulnerability CVE-2024-9474 Palo Alto Networks PAN-OS…

  • Hacker News: Drinking water systems for 26M Americans face high cybersecurity risks

    —

    by

    system automation
    in

    Source URL: https://www.scworld.com/news/drinking-water-systems-for-26m-americans-face-high-cybersecurity-risks Source: Hacker News Title: Drinking water systems for 26M Americans face high cybersecurity risks Feedly Summary: Comments AI Summary and Description: Yes Summary: The report by the EPA’s Office of Inspector General highlights alarming cybersecurity vulnerabilities in U.S. drinking water systems, affecting around 26.6 million Americans. The lack of an incident reporting…

  • The Register: Mystery Palo Alto Networks hijack-my-firewall zero-day now officially under exploit

    —

    by

    system automation
    in

    Source URL: https://www.theregister.com/2024/11/15/palo_alto_networks_firewall_zeroday/ Source: The Register Title: Mystery Palo Alto Networks hijack-my-firewall zero-day now officially under exploit Feedly Summary: Yank access to management interface, stat A critical zero-day vulnerability in Palo Alto Networks’ firewall management interface that can allow an unauthenticated attacker to remotely execute code is now officially under active exploitation.… AI Summary and…

  • Alerts: CISA Adds Two Known Exploited Vulnerabilities to Catalog

    —

    by

    system automation
    in

    Source URL: https://www.cisa.gov/news-events/alerts/2024/11/14/cisa-adds-two-known-exploited-vulnerabilities-catalog Source: Alerts Title: CISA Adds Two Known Exploited Vulnerabilities to Catalog Feedly Summary: CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2024-9463 Palo Alto Networks Expedition OS Command Injection Vulnerability CVE-2024-9465 Palo Alto Networks Expedition SQL Injection Vulnerability These types of vulnerabilities are frequent…