| Date | Source | Type | Title | Author |
|---|---|---|---|---|
| Jan 31, 2024 | CISA | Alert | CISA and FBI Release Secure by Design Alert Urging Manufacturers to Eliminate Defects in SOHO Routers Today, CISA and the Federal Bureau of Investigation (FBI) published guidance on Security Design Improvements for SOHO Device Manufacturers as a part of the new Secure by Design (SbD) Alert series that focuses on how manufacturers should shift the burden of security away from customers by integrating security into product design and development. | CISA, FBI |
| Jan 31, 2024 | FBI | Alert | Malicious Cyber Actors Exploiting Insecure SOHO Routers Security Design Improvements for Threat actors—particularly the People’s Republic of China (PRC)—sponsored Volt Typhoon group—are compromising small office/home office (SOHO) routers by including the Volt Typhoon group, exploiting software defects that manufacturers must eliminate through secure have made headlines by exploiting software design and development. | FBI |
| Jan 30, 2024 | CISA | Alert | CISA Releases Eight Industrial Control Systems Advisories These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-24-030-01 Emerson Rosemount GC370XA, GC700XA, GC1500XA ICSA-24-030-02 Mitsubishi Electric FA Engineering Software Products ICSA-24-030-03 Mitsubishi Electric MELSEC WS Series Ethernet Interface Module ICSA-24-030-04 Hitron Systems Security Camera DVR ICSA-24-030-05 Rockwell Automation ControlLogix and GuardLogix ICSA-24-0… | CISA |
| Jan 30, 2024 | CISA | Alert | Updated: New Software Updates and Mitigations to Defend Against Exploitation of Ivanti Connect Secure and Policy Secure Gateways On Feb. 14, 2024, Ivanti released new software updates for Ivanti Connect Secure and Ivanti Policy Secure. An newly disclosed XML external entity injection (XXE) vulnerability (CVE-2024-22024) affecting: Connect Secure supported versions 9.1R14.4, 9.1R17.2, 9.1R18.3, 22.4R2.2, 22.5R1.1, and 22.5R2.2 Policy Secure supported versions 22.5R1.1 and ZTA version 22.6R1.3 Connect Secure supported versions 9.1R14.4, 9.1R17.2, 9.1R18.3, 22.4R2.2, 22.5R1. | CISA |
| Jan 30, 2024 | CISA | ICS Advisory | ICSA-24-030-03: Mitsubishi Electric MELSEC WS Series Ethernet Interface Module Successful exploitation of this vulnerability could allow an unauthorized attacker to login to the modules and disclose or tamper with the programs and parameters in the modules. | CISA |
| Jan 30, 2024 | CISA | ICS Advisory | ICSA-24-030-04: Hitron Systems Security Camera DVR Successful exploitation of these vulnerabilities could allow an attacker to affect the availability of the product through exploitation of an improper input validation vulnerability and default credentials. | CISA |
| Jan 30, 2024 | CISA | ICS Advisory | ICSA-24-030-05: Rockwell Automation ControlLogix and GuardLogix Successful exploitation of this vulnerability could allow an attacker to crash the device by exploiting a Denial-of-Service (DoS) vulnerability. | CISA |
| Jan 30, 2024 | CISA | ICS Advisory | ICSA-24-030-06: Rockwell Automation FactoryTalk Service Platform Successful exploitation of this vulnerability could allow an attacker to retrieve user information and modify settings without any authentication. | CISA |
| Jan 30, 2024 | CISA | ICS Advisory | ICSA-24-030-07: Rockwell Automation LP30/40/50 and BM40 Operator Interface Successful exploitation of these vulnerabilities could allow an authenticated attacker to use specifically crafted communication requests to perform a denial-of-service condition, memory overwriting, or remote code execution. | CISA |
| Jan 30, 2024 | CISA | ICS Advisory | ICSA-24-030-01: Emerson Rosemount GC370XA, GC700XA, GC1500XA Successful exploitation of these vulnerabilities could allow an unauthenticated attacker with network access to run arbitrary commands, access sensitive information, cause a denial-of-service condition, and bypass authentication to acquire admin capabilities. | CISA |
| Jan 30, 2024 | CISA | ICS Advisory | ICSA-24-030-02: Mitsubishi Electric FA Engineering Software Products (Update D) Successful exploitation of these vulnerabilities could allow an attacker to disclose, tamper with, destroy or delete information in the products, or cause a denial-of-service (DoS) condition on the products. | CISA |
| Jan 30, 2024 | CERT-EU | Advisory | 2024-014: Critical Remote Code Execution Vulnerability in Jenkins The advisory published provides detailed information on various attack scenarios, exploitation pathways, descriptions of the fixes, and potential workarounds for those unable to immediately Multiple proof-of-concept (PoC) exploits for CVE-2024-23897 are now available [2]. The vulnerability CVE-2024-23897, with a CVSS score of 9. | CERT-EU |
| Jan 29, 2024 | CISA | Alert | Juniper Networks Releases Security Bulletin for J-Web in Junos OS SRX Series and EX Series A cyber threat actor could exploit one of these vulnerabilities to take control of an affected system. This product is provided subject to this Notification and this Privacy & Use policy. | CISA |
| Jan 29, 2024 | CERT-EU | Advisory | 2024-015: Remote Code Execution Vulnerability in Cisco Products This vulnerability, tracked as CVE-2024-20253 with a CVSS score of 9.9, could allow an unauthenticated, remote attacker to execute arbitrary code on an affected device. Currently, Cisco has no evidence of public proof of concept exploits for this vulnerability or active exploitation in the wild. | CERT-EU |
| Jan 26, 2024 | CISA | Alert | Guidance: Assembling a Group of Products for SBOM CISA’s community-driven working groups publish documents and reports to advance and refine SBOM and ultimately promote adoption. Specifically, software producers often need to assemble and test products together before releasing them to customers. These products may contain components that experience version changes over time, therefore creating a need to be tracked. | CISA |
| Jan 25, 2024 | CISA | Alert | CISA Releases Two Industrial Control Systems Advisories These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-24-025-01 MachineSense FeverWarn ICSA-24-025-02 SystemK NVR 504/508/516 This product is provided subject to this Notification and this Privacy & Use policy. | CISA |
| Jan 25, 2024 | CISA | Alert | Cisco Releases Security Advisory for Multiple Unified Communications and Contact Center Solutions Products A cyber threat actor could exploit this vulnerability to take control of an affected system. This product is provided subject to this Notification and this Privacy & Use policy. | CISA |
| Jan 25, 2024 | CISA | ICS Advisory | ICSA-24-025-01: MachineSense FeverWarn Successful exploitation of these vulnerabilities could allow an attacker to obtain user data from devices, execute remote code on devices, or gain control over devices to perform malicious actions. | CISA |
| Jan 25, 2024 | CISA | ICS Advisory | ICSA-24-025-02: SystemK NVR 504/508/516 Successful exploitation of this vulnerability could allow an attacker to execute commands with root privileges. | CISA |
| Jan 24, 2024 | CISA | Alert | Mozilla Releases Security Updates for Thunderbird and Firefox A cyber threat actor could exploit one of these vulnerabilities to take control of an affected system. This product is provided subject to this Notification and this Privacy & Use policy. | CISA |
| Jan 24, 2024 | CERT-EU | Advisory | 2024-013: Zero-Day Vulnerability in Apple Products This vulnerability affects iOS, iPadOS, macOS and tvOS devices and is currently being exploited in the wild [2]. The updates also contain fixes for other vulnerabilities It is recommended updating as soon as possible. | CERT-EU |
| Jan 24, 2024 | NCSC | Analysis Report | The near-term impact of AI on the cyber threat During the Bletchley AI Safety Summit in November 2023, international leaders came together to discuss the vast potential of AI models in promoting economic growth, propelling scientific advances, and providing a wide range of public benefits. They also underscored the security risks that could arise from the irresponsible development and use of AI technologies. | NCSC-UK |
| Jan 23, 2024 | CISA | Alert | CISA Joins ACSC-led Guidance on How to Use AI Systems Securely The following organizations also collaborated with ACSC on the guidance: Israel National Cyber Directorate (INCD) Japan National Center of Incident Readiness and Strategy for Cybersecurity (NISC) and the Secretariat of Science, Technology and Innovation Policy, Cabinet Office Norway National Cyber Security Centre (NCSC-NO) Sweden National Cybersecurity Center The guidance provides AI systems users with an overview of AI-related threats as well as… | ASD/ACSC, CISA |
| Jan 23, 2024 | CISA | Alert | CISA Releases Six Industrial Control Systems Advisories These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-24-023-01 APsystems Energy Communication Unit (ECU-C) Power Control Software ICSA-24-023-02 Crestron AM-300 ICSA-24-023-03 Voltronic Power ViewPower Pro ICSA-23-023-04 Westermo Lynx 206-F2G ICSA-24-023-05 Lantronix XPort ICSMA-24-023-01 Orthanc Osimis DICOM Web Viewer This product is provided subject to this Notification… | CISA |
| Jan 23, 2024 | CISA | Alert | Apple Releases Security Updates for Multiple Products A cyber threat actor could exploit some of these vulnerabilities to take control of an affected system. This product is provided subject to this Notification and this Privacy & Use policy. | CISA |
| Jan 23, 2024 | CISA | ICS Advisory | ICSA-24-023-01: APsystems Energy Communication Unit (ECU-C) Power Control Software Successful exploitation of this vulnerability could allow an attacker to access sensitive data and execute specific commands and functions with full admin rights without authenticating. | CISA |
| Jan 23, 2024 | CISA | ICS Advisory | ICSA-24-023-02: Crestron AM-300 Successful exploitation of this vulnerability could allow an attacker to escalate their privileges to root-level access. | CISA |
| Jan 23, 2024 | CISA | ICS Advisory | ICSA-24-023-03: Voltronic Power ViewPower Pro Successful exploitation of these vulnerabilities could allow an attacker to create a denial-of-service condition, obtain administrator credentials, or achieve remote code execution. | CISA |
| Jan 23, 2024 | CISA | ICS Advisory | ICSA-24-023-04: Westermo Lynx 206-F2G Successful exploitation of these vulnerabilities could allow an attacker to access the web application, inject arbitrary code, execute malicious code, obtain sensitive information, or execute a malicious request. | CISA |
| Jan 23, 2024 | CISA | ICS Advisory | ICSA-24-023-05: Lantronix XPort Successful exploitation of this vulnerability could allow an attacker to obtain credentials. | CISA |
| Jan 23, 2024 | NSA | Guidance | CSI: Engaging with Artificial Intelligence The purpose of this publication is to provide organisations with guidance on how to use AI systems securely. The paper summarises some important threats related to AI systems and prompts organisations to consider steps they can take to engage with AI while managing risk. | ASD/ACSC, BSI, CCCS, CISA, CSA, FBI, NCSC-NZ, NCSC-UK, NSA |
| Jan 23, 2024 | CISA | ICS Medical Advisory | ICSMA-24-023-01: Orthanc Osimis DICOM Web Viewer Successful exploitation of this vulnerability could allow an attacker to execute arbitrary JavaScript code inside the victim's browser. | CISA |
| Jan 19, 2024 | CERT-EU | Advisory | 2024-012: Vulnerability in Chrome On January 16, 2024, Google has released an advisory addressing a zero-day vulnerability identified as CVE-2024-0519, which affects the V8 engine in Google Chromium. This vulnerability allows for out-of-bounds memory access, potentially leading to heap corruption through a crafted HTML page. It has been reported that this vulnerability is being actively exploited. | CERT-EU |
| Jan 19, 2024 | CISA | Alert | CISA Issues Emergency Directive on Ivanti Vulnerabilities ED 24-01 directs all Federal Civilian Executive Branch (FCEB) agencies running Ivanti Connect Secure and Ivanti Policy Secure to: Report indications of compromise to CISA. Remove compromised products from agency networks and follow the ED’s comprehensive instructions for restoring and bringing the products back into service. | CISA |
| Jan 19, 2024 | CERT-EU | Advisory | 2024-011: Vulnerability in Wordpress POST SMTP Mailer Plugin This vulnerability, identified as CVE-2023-6875 (CVSS score of 9.8)[1], may allow an unauthenticated attacker to reset the API key used to authenticate to the mailer and view logs, including password reset emails on WordPress sites that use this plugin [2]. This vulnerability could affect sites that have the POST SMTP Mailer plugin installed and configured, which is estimated to be over 300,000 sites [3]. | CERT-EU |
| Jan 18, 2024 | CISA | ICS Advisory | ICSA-24-018-01: AVEVA PI Server Successful exploitation of these vulnerabilities could allow an attacker to crash the product being accessed or throttle the memory leading to a partial denial-of-service condition. | CISA |
| Jan 18, 2024 | CISA | Alert | Incident Response Guide for the WWS Sector The guide includes contributions from over 25 WWS Sector organizations spanning private industry, nonprofit, and government entities. This coordination enabled CISA, FBI, and EPA to develop a guide with meaningful value to WWS Sector organizations. | CISA |
| Jan 18, 2024 | CISA | Alert | CISA Releases One Industrial Control Systems Advisory These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-24-018-01 AVEVA PI Server This product is provided subject to this Notification and this Privacy & Use policy. | CISA |
| Jan 18, 2024 | CISA | Alert | Drupal Releases Security Advisory for Drupal Core A cyber threat actor could exploit this vulnerability to cause a denial-of-service condition. This product is provided subject to this Notification and this Privacy & Use policy. | CISA |
| Jan 18, 2024 | CISA | Alert | Oracle Releases Critical Patch Update Advisory for January 2024 A cyber threat actor could exploit some of these vulnerabilities to take control of an affected system. This product is provided subject to this Notification and this Privacy & Use policy. | CISA, JPCERT/CC |
| Jan 18, 2024 | CISA | Alert | Citrix Releases Security Updates for NetScaler ADC and NetScaler Gateway A cyber threat actor could exploit one of these vulnerabilities to take control of an affected system. This product is provided subject to this Notification and this Privacy & Use policy. | CISA |
| Jan 18, 2024 | CISA | Alert | Atlassian Releases Security Updates for Multiple Products Atlassian released a security advisory to address a vulnerability (CVE-2023-22527) in out-of-date versions of Confluence Data Center and Server as well as its January 2024 security bulletin to address vulnerabilities in multiple products. A malicious cyber actor could exploit one of these vulnerabilities to take control of an affected system. This product is provided subject to this Notification and this Privacy & Use policy. | CISA |
| Jan 17, 2024 | FBI | Guidance | Cybersecurity Guidance: Chinese-Manufactured UAS national security. While any UAS could have vulnerabilities that enable data theft or facilitate network compromises, the People’s Republic of China (PRC) has enacted laws that provide the government with expanded legal grounds for accessing and controlling data held by firms in China. The use of Chinese-manufactured UAS requires careful consideration and potential mitigation to reduce risk to networks and sensitive information. | FBI |
| Jan 17, 2024 | CERT-EU | Advisory | 2024-009: Critical and High Vulnerabilities in Atlassian Products The editor also released a security advisory addressing 28 high-severity vulnerabilities which have been fixed in new versions of Atlassian products [2]. The critical vulnerability CVE-2023-22527, with a CVSS score of 10, is due to a template injection vulnerability on out-of-date versions of Confluence Data Center and Server that allows an unauthenticated attacker to achieve RCE on an affected version [1]. | CERT-EU |
| Jan 17, 2024 | CISA | Alert | VMware Releases Security Advisory for Aria Automation A cyber threat actor could exploit this vulnerability to take control of an affected system. This product is provided subject to this Notification and this Privacy & Use policy. | CISA |
| Jan 16, 2024 | CISA | Advisory | Known Indicators of Compromise Associated with Androxgh0st Malware tactics, techniques, and procedures (TTPs) associated • Review and ensure only necessary with threat actors deploying Androxgh0st malware. servers and services are exposed to Multiple, ongoing investigations and trusted third party the internet. reporting yielded the IOCs and TTPs, and provided • Review platforms or services that information on Androxgh0st malware’s ability to have credentials listed in . | CISA, CSA, FBI |
| Jan 16, 2024 | CISA | Alert | CISA Releases Two Industrial Control Systems Advisories These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-24-016-01 SEW-EURODRIVE MOVITOOLS MotionStudio ICSA-24-016-02 Integration Objects OPC UA Server Toolkit This product is provided subject to this Notification and this Privacy & Use policy. | CISA |
| Jan 16, 2024 | CISA | Alert | CISA and FBI Release Known IOCs Associated with Androxgh0st Malware Androxgh0st malware establishes a botnet for victim identification and exploitation in vulnerable networks, and targets files that contain confidential information, such as credentials, for various high profile applications. Threat actors deploying Androxgh0st malware have been observed exploiting specific vulnerabilities which could lead to remote code execution, including: CVE-2017-9841 (PHP Unit Command) CVE-2021-41773 (Apache HTTP Server vers… | CISA, FBI |
| Jan 16, 2024 | CISA | ICS Advisory | ICSA-24-016-02: Integration Objects OPC UA Server Toolkit (Update A) Successful exploitation of this vulnerability could allow a remote attacker to add content to the log file. | CISA |
| Jan 16, 2024 | CISA | ICS Advisory | ICSA-24-016-01: SEW-EURODRIVE MOVITOOLS MotionStudio Successful exploitation of this vulnerability could result in open access to file information. | CISA |
| Jan 15, 2024 | CERT-EU | Advisory | 2024-008: Critical Vulnerabilities in Junos OS While Juniper SIRT is not aware of any malicious exploitation of this vulnerability, it is recommended upgrading as soon as possible. The vulnerability CVE-2024-21591 , with a CVSS score of 9.8, is due to an insecure function allowing an attacker to overwrite arbitrary memory. | CERT-EU |
| Jan 12, 2024 | CERT-EU | Advisory | 2024-007: Critical Vulnerabilities in GitLab and Mattermost integrations to execute slash commands as another user. the required CODEOWNERS approval by adding changes to a previously approved merge Within these versions, all authentication mechanisms are impacted. Additionally, users who have two-factor authentication enabled are vulnerable to password reset but not account takeover as their second authentication factor is required to login. | CERT-EU |
| Jan 11, 2024 | CISA | Alert | Cisco Releases Security Advisory for Cisco Unity Connection A cyber threat actor could exploit this vulnerability to take control of an affected system. This product is provided subject to this Notification and this Privacy & Use policy. | CISA |
| Jan 11, 2024 | CISA | Alert | Juniper Networks Releases Security Bulletin for Junos OS and Junos OS Evolved A cyber threat actor could exploit this vulnerability to cause a denial-of-service condition. This product is provided subject to this Notification and this Privacy & Use policy. | CISA |
| Jan 11, 2024 | CISA | Alert | CISA Releases Nine Industrial Control Systems Advisories These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-24-011-03 Rapid Software LLC Rapid SCADA ICSA-24-011-04 Horner Automation Cscape ICSA-24-011-05 Schneider Electric Easergy Studio ICSA-24-011-06 Siemens Teamcenter Visualization and JT2Go ICSA-24-011-08 Siemens SICAM A8000 ICSA-24-011-09 Siemens SIMATIC CN 4100 ICSA-24-011-10 Siemens SIMATIC ICSA-24-011-11 Siemens Solid E… | CISA |
| Jan 11, 2024 | CISA | ICS Advisory | ICSA-24-011-08: Siemens SICAM A8000 The CPCI85 firmware of SICAM A8000 CP-8031 and CP-8050 is affected by a command injection vulnerability that could allow an authenticated remote attacker to inject commands that are executed on the device with root privileges during device startup. Siemens has released new versions for the affected products and recommends to update to the latest versions. | CISA |
| Jan 11, 2024 | CERT-EU | Advisory | 2024-005: Critical Vulnerability in Cisco Unity Connection This vulnerability, tracked as CVE-2024-20272 with a CVSS score of 7.3, could allow an unauthenticated, remote attacker to upload arbitrary files to an affected system and execute commands on the underlying operating system. Currently, Cisco has no evidence of public proof of concept exploits for this vulnerability or active exploitation in the wild. | CERT-EU |
| Jan 11, 2024 | CERT-EU | Advisory | 2024-006: High Vulnerability in FortiOS & FortiProxy This vulnerability, tracked as CVE-2023-44250 and with a CVSS score of 8.3, could allow an authenticated attacker to perform elevated actions via crafted HTTP or HTTPS requests. The bug is due to an improper privilege management vulnerability in a FortiOS & FortiProxy HA cluster. If exploited, this vulnerability could allow an authenticated attacker to perform elevated actions via crafted HTTP or HTTPS requests. | CERT-EU |
| Jan 11, 2024 | CISA | ICS Advisory | ICSA-24-011-07: Siemens Spectrum Power 7 Spectrum Power 7 is affected by a vulnerability that could allow an authenticated local attacker to inject arbitrary code and gain root access. Siemens has released an update for Spectrum Power 7 and recommends to update to the latest version. | CISA |
| Jan 11, 2024 | CISA | ICS Advisory | ICSA-24-011-06: Siemens Teamcenter Visualization and JT2Go Siemens Teamcenter Visualization and JT2Go are affected by multiple file parsing vulnerabilities that could be triggered when the application reads malicious CGM files. If a user is tricked to open a malicious CGM file with the affected products, this could lead the application to crash or potentially lead to arbitrary code execution. Siemens has released new versions for the affected products and recommends to update to the latest versions. | CISA |
| Jan 11, 2024 | CISA | ICS Advisory | ICSA-24-011-05: Schneider Electric Easergy Studio Successful exploitation of this vulnerability could allow an attacker to gain full control of a workstation. | CISA |
| Jan 11, 2024 | CISA | ICS Advisory | ICSA-24-011-04: Horner Automation Cscape Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code. | CISA |
| Jan 11, 2024 | CISA | ICS Advisory | ICSA-24-011-03: Rapid Software LLC Rapid SCADA Successful exploitation of these vulnerabilities could result in an attacker reading sensitive files from the RapidScada server, writing files to the Scada directory (thus achieving code execution,) gaining access to sensitive systems via legitimate-seeming phishing attacks, connecting to the server and perfoming attacks using the high privileges of a service, obtaining administrator passwords, learning sensitive information about the internal code of the application, or achieving remote code execution. | CISA |
| Jan 11, 2024 | CISA | ICS Advisory | ICSA-24-011-11: Siemens Solid Edge Siemens Solid Edge 2023 has released Update 10, that fixes multiple vulnerabilities that could be triggered when the application reads PAR files. If a user is tricked to open a malicious file using the affected application, this could lead to a crash, and potentially also to arbitrary code execution on the target host system. Siemens has released a new version for Solid Edge SE2023 and recommends to update to the latest version. | CISA |
| Jan 11, 2024 | CISA | ICS Advisory | ICSA-24-011-10: Siemens SIMATIC MaxView Storage Manager shipped with affected SIMATIC IPCs contains a Redfish Server Vulnerability that could provide unauthorized access. Microchip has released new versions for the affected products and recommends to update to the latest versions. | CISA |
| Jan 11, 2024 | CISA | ICS Advisory | ICSA-24-011-09: Siemens SIMATIC CN 4100 SIMATIC CN 4100 is vulnerable to authorization bypass through user-controlled key, use of default credentials and unauthenticated IP address change that could allow an attacker to remotely login as root or cause denial of service condition of the device. Siemens has released a new version for SIMATIC CN 4100 and recommends to update to the latest version. | CISA |
| Jan 10, 2024 | CISA | Alert | Ivanti Releases Security Update for Connect Secure and Policy Secure Gateways | CISA |
| Jan 9, 2024 | CERT-EU | Advisory | 2024-003: Critical Vulnerability in Apache OFBiz The vulnerability allows attackers to bypass authentication, which could lead to remote code execution (RCE) [1]. The vulnerability, identified as CVE-2023-51467 with a CVSS score of 9.8 [2], may allow an attacker to bypass authentication to achieve a simple Server-Side Request Forgery (SSRF). | CERT-EU |
| Jan 9, 2024 | CISA | Alert | Microsoft Releases Security Updates for Multiple Products A cyber threat actor could exploit some of these vulnerabilities to take control of an affected system. This product is provided subject to this Notification and this Privacy & Use policy. | CISA, JPCERT/CC |
| Jan 9, 2024 | CISA | Alert | Fortinet Releases Security Updates for FortiOS and FortiProxy A cyber threat actor could exploit this vulnerability to take control of an affected system. This product is provided subject to this Notification and this Privacy & Use policy. | CISA |
| Jan 9, 2024 | CISA | Alert | CISA Releases One Industrial Control Systems Advisory These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-23-348-01 Cambium ePMP 5GHz Force 300-25 Radio (Update A) This product is provided subject to this Notification and this Privacy & Use policy. | CISA |
| Jan 8, 2024 | CERT-EU | Advisory | 2024-001: Vulnerability in Wordpress Google Fonts Plugin On January 2, 2024, an unauthenticated Stored Cross-Site Scripting (XSS) and directory deletion vulnerability has been discovered in the “OMGF | GDPR/DSGVO Compliant, Faster Google Fonts. This vulnerability, identified as CVE-2023-6600 (CVSS score of 8.6)[1], may allow unauthenticated attackers to update the plugin’s settings and inject malicious scripts into affected sites [2]. | CERT-EU |
| Jan 8, 2024 | CERT-EU | Advisory | 2024-002: Critical Vulnerability in Ivanti Endpoint Management Software This vulnerability, tracked as CVE-2023-39336 (CVSS score : 9.6), allows unauthenticated attackers to hijack enrolled devices or the core server. Ivanti EPM is used to manage client devices across various platforms, including Windows, macOS,ChromeOS,andIoToperatingsystems. | CERT-EU |
| Jan 4, 2024 | NSA | Guidance | CSI: Recommendations for Software Bill of Materials (SBOM) Management (Jan 2024 Update) Recommendations for Software Bill of Materials The dramatic increase in cyber compromises over the past five years, specifically of software supply chains, prompted intense scrutiny of measures to strengthen the resilience of supply chains for software used throughout government and critical infrastructure. Several policies and working groups at multiple levels within the U.S. | CISA, NSA |
| Jan 4, 2024 | CISA | Alert | CISA Releases Three Industrial Control Systems Advisories These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-24-004-01 Rockwell Automation FactoryTalk Activation ICSA-24-004-02 Mitsubishi Electric Factory Automation Products ICSA-23-348-15 Unitronics Vision and Samba Series (Update A) This product is provided subject to this Notification and this Privacy & Use policy. | CISA |
| Jan 4, 2024 | CISA | ICS Advisory | ICSA-24-004-02: Mitsubishi Electric Factory Automation Products Successful exploitation of these vulnerabilities could disclose information in the product or could cause denial-of-service (DoS) condition. | CISA |
| Jan 4, 2024 | CISA | ICS Advisory | ICSA-24-004-01: Rockwell Automation FactoryTalk Activation Successful exploitation of these vulnerabilities could result in a buffer overflow and allow the attacker to gain full access to the system. | CISA |
| Jan 2, 2024 | CISA | Alert | Juniper Releases Security Advisory for Juniper Secure Analytics A cyber threat actor could exploit one of these vulnerabilities to take control of an affected system. This product is provided subject to this Notification and this Privacy & Use policy. | CISA |