| Date | Source | Type | Title | Author |
|---|---|---|---|---|
| Mar 29, 2024 | CISA | Alert | Reported Supply Chain Compromise Affecting XZ Utils Data Compression Library, CVE-2024-3094 | CISA |
| Mar 29, 2024 | CERT-EU | Advisory | 2024-031: High Severity Vulnerabilities in Cisco Products Six (6) high severity vulnerabilities with a CVSS score of 8.6, could allow an unauthenticated, remote attacker to cause denial of service on an packet to an affected device. A successful exploit could allow the attacker to cause the device to reload, resulting in a denial of service (DoS) condition [2]. to exhaust CPU resources and stop processing traffic, resulting in a DoS condition [3]. crafted UDP packets to an affected system. | CERT-EU |
| Mar 28, 2024 | CISA | Alert | Cisco Releases Security Updates for Multiple Products Cisco released security updates to address vulnerabilities in Cisco IOS, IOS XE, and AP software. A cyber threat actor could exploit some of these vulnerabilities to cause a denial-of-service. Cisco Event Response: March 2024 Semiannual Cisco IOS and IOS XE Software Security Advisory Bundled Publication Cisco Access Point Software Secure Boot Bypass Vulnerability Cisco Access Point Software Denial of Service Vulnerability This product is provided… | CISA |
| Mar 27, 2024 | CISA | Alert | Apple Released Security Updates for Safari and macOS A cyber threat actor could exploit this vulnerability to take control of an affected system. This product is provided subject to this Notification and this Privacy & Use policy. | CISA |
| Mar 26, 2024 | CISA | Alert | CISA Releases Four Industrial Control Systems Advisories These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-24-086-01 Automation-Direct C-MORE EA9 HMI ICSA-24-086-03 Rockwell Automation Arena Simulation ICSA-24-086-04 Rockwell Automation FactoryTalk View ME This product is provided subject to this Notification and this Privacy & Use policy. | CISA |
| Mar 26, 2024 | CISA | ICS Advisory | ICSA-24-086-04: Rockwell Automation FactoryTalk View ME Successful exploitation of this vulnerability could lead to the loss of view or control of the PanelView product. | CISA |
| Mar 26, 2024 | CISA | ICS Advisory | ICSA-24-086-03: Rockwell Automation Arena Simulation Successful exploitation of these vulnerabilities could crash the application or allow an attacker to run harmful code on the system. | CISA |
| Mar 26, 2024 | CISA | ICS Advisory | ICSA-24-086-02: Rockwell Automation PowerFlex 527 Successful exploitation of this these vulnerabilities could crash the device and require a manual restart to recover. | CISA |
| Mar 26, 2024 | CISA | ICS Advisory | ICSA-24-086-01: AutomationDirect C-MORE EA9 HMI Successful exploitation of these vulnerabilities could allow an attacker to exploit a remote device and inject malicious code on the panel. | CISA |
| Mar 25, 2024 | CISA | Alert | CISA and FBI Release Secure by Design Alert to Urge Manufacturers to Eliminate SQL Injection Vulnerabilities This Alert was crafted in response to a recent, well-publicized exploitation of SQL injection (SQLi) defects in a managed file transfer application that impacted thousands of organizations. Additionally, the Alert highlights the prevalence of this class of vulnerability. | CISA, FBI |
| Mar 21, 2024 | CISA | Alert | CISA, FBI, and MS-ISAC Release Update to Joint Guidance on Distributed Denial-of-Service Techniques The guidance now includes detailed insight into three different types of DDoS techniques: Volumetric, attacks aiming to consume available bandwidth. Protocol, attacks which exploit vulnerabilities in network protocols. | CISA, FBI, MS-ISAC |
| Mar 21, 2024 | CISA | Alert | CISA Releases One Industrial Control Systems Advisory These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-24-081-01 Advantech WebAccess/SCADA This product is provided subject to this Notification and this Privacy & Use policy. | CISA |
| Mar 21, 2024 | CISA | Alert | Ivanti Releases Security Updates for Neurons for ITSM and Standalone Sentry A cyber threat actor could exploit these vulnerabilities to take control of an affected system. CVE-2023-46808 (Authenticated Remote File Write) for Ivanti Neurons for ITSM CVE-2023-41724 (Remote Code Execution) for Ivanti Standalone Sentry This product is provided subject to this Notification and this Privacy & Use policy. | CISA |
| Mar 21, 2024 | CERT-EU | Advisory | 2024-030: Critical Vulnerabilities in Ivanti Products According to Ivanti, there is no evidence of these vulnerabilities being exploited in the wild. It is recommended upgrading affected software as soon as possible. | CERT-EU |
| Mar 21, 2024 | NCSC | Guidance | Responding to a cyber incident – a guide for CEOs It sets out aspects to consider at the start of an incident and If your organisation is victim of a significant cyber attack, the immediate aftermath will be challenging. You may find there is a lot of information in some areas, and none in others. | NCSC-UK |
| Mar 21, 2024 | CISA | ICS Advisory | ICSA-24-081-01: Advantech WebAccess/SCADA Successful exploitation of this vulnerability could allow an authenticated attacker to read or modify a remote database. | CISA |
| Mar 21, 2024 | NSA | Alert | PRC State-Sponsored Cyber Activity: Actions for Critical Infrastructure Leaders This fact sheet provides an overview for executive leaders on the urgent risk posed by People’s Republic of China (PRC) state-sponsored cyber actors known as “Volt Typhoon.” CISA—along with the National Security Agency (NSA), the Federal Bureau of Investigation (FBI), and other U.S. government and international partners1—released a major advisory on Feb. 7, 2024, in which the U.S. | ASD/ACSC, CCCS, DOE, EPA, FBI, NCSC-NZ, NCSC-UK, NSA, TSA, Treasury |
| Mar 19, 2024 | NSA | Alert | CISA and Partners Release Joint Fact Sheet for Leaders on PRC-sponsored Volt Typhoon Cyber Activity and international partners are issuing a joint fact sheet, People’s Republic of China State-Sponsored Cyber Activity: Actions for Critical Infrastructure Leaders . Partners of this publication include: U.S. Department of Energy (DOE) U.S. Environmental Protection Agency (EPA) U.S. Transportation Security Administration (TSA) U.S. | CISA, FBI, NSA |
| Mar 19, 2024 | CISA | Alert | CISA Releases One Industrial Control Systems Advisory These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-24-079-01 Franklin Fueling System EVO 550/5000 This product is provided subject to this Notification and this Privacy & Use policy. | CISA |
| Mar 19, 2024 | CISA | ICS Advisory | ICSA-24-079-01: Franklin Fueling System EVO 550/5000 Successful exploitation of this vulnerability could allow an attacker to read arbitrary files on the system. | CISA |
| Mar 18, 2024 | CISA | Alert | Repository for Software Attestation and Artifacts Now Live Software producers that provide the government software can fill out the form to attest to implementation of specific security practices. CISA and the Office of Management and Budget (OMB) released the form on March 11, 2024, following extensive stakeholder and industry engagement. | CISA |
| Mar 14, 2024 | CISA | ICS Advisory | ICSA-24-074-06: Siemens SENTRON SENTRON 3KC ATC6 Expansion Module Ethernet exposes an unused, unstable http service at port 80/tcp on the Modbus-TCP Ethernet, which could allow an attacker on the same Modbus network to create a denial of service condition that forces the device to reboot. Siemens is preparing fix versions and recommends specific countermeasures for products where fixes are not, or not yet available. | CISA |
| Mar 14, 2024 | CISA | ICS Advisory | ICSA-24-074-10: Siemens Siveillance Control Siveillance Control does not properly check the list of access groups that are assigned to an individual user. This could enable a locally logged on user to gain write privileges for objects where they only have read privileges. Siemens has released a new version for Siveillance Control and recommends to update to the latest version. | CISA |
| Mar 14, 2024 | CISA | ICS Advisory | ICSA-24-074-07: Siemens SIMATIC Successful exploitation of these vulnerabilities could allow an attacker to execute arbitrary code within the context of a privileged process. | CISA |
| Mar 14, 2024 | CISA | ICS Advisory | ICSA-24-074-12: Delta Electronics DIAEnergie Successful exploitation of these vulnerabilities could allow an attacker to escalate privileges, disclose sensitive information, or disrupt system availability. | CISA |
| Mar 14, 2024 | CISA | ICS Advisory | ICSA-24-074-13: Softing edgeConnector Successful exploitation of these vulnerabilities could create conditions that may allow remote code execution. | CISA |
| Mar 14, 2024 | CISA | ICS Advisory | ICSA-24-074-04: Siemens SINEMA Remote Connect Client SINEMA Remote Connect Client before V3.1 SP1 is affected by an information disclosure vulnerability. Siemens has released updates for the affected products and recommends to update to the latest versions. | CISA |
| Mar 14, 2024 | CISA | ICS Advisory | ICSA-24-074-03: Siemens SINEMA Remote Connect Server SINEMA Remote Connect Server before V3.2 is affected by multiple vulnerabilities. Siemens has released updates for the affected products and recommends to update to the latest versions. | CISA |
| Mar 14, 2024 | CISA | ICS Advisory | ICSA-24-074-02: Siemens Solid Edge Solid Edge is affected by an out of bounds read vulnerability that could be triggered when the application reads files that contains XT parts. If a user is tricked to open a malicious file with the affected applications, an attacker could leverage the vulnerability to perform remote code execution in the context of the current process. Siemens has released new versions for the affected products and recommends to update to the latest versions. | CISA |
| Mar 14, 2024 | CISA | ICS Advisory | ICSA-24-074-09: Siemens Sinteso EN Cerberus PRO EN Fire Protection Systems Several products used in Sinteso EN and Cerberus PRO EN Fire Protection Systems contain buffer overflow vulnerabilities in the network communication stack. Successful exploitation of the vulnerabilities could allow an unauthenticated attacker, who gained access to the fire protection system network, to execute arbitrary code on the affected products (CVE-2024-22039) or create a denial of service condition (CVE-2024-22040, CVE-2024-22041). Product-specific impact of the individual vulnerabilities is documented in the chapter "Vulnerability Description". | CISA |
| Mar 14, 2024 | CISA | ICS Advisory | ICSA-24-074-14: Mitsubishi Electric MELSEC-Q/L Series (Update B) Successful exploitation of these vulnerabilities could allow a remote attacker to be able to read arbitrary information or execute malicious code on a target product by sending a specially crafted packet. | CISA |
| Mar 14, 2024 | CISA | ICS Advisory | ICSA-24-074-01: Siemens SENTRON 7KM PAC3x20 The read out protection of the internal flash of affected devices was not properly set at the end of the manufacturing process. An attacker with physical access to the device could read out the data. Siemens has released new versions for the affected products and recommends to update to the latest versions. | CISA |
| Mar 14, 2024 | CISA | Alert | Cisco Releases Security Updates for IOS XR Software A cyber threat actor could exploit one of these vulnerabilities to take control of an affected device. Cisco IOS XR Software for ASR 9000 Series Aggregation Services Routers PPPoE Denial of Service Vulnerability Cisco IOS XR Software SSH Privilege Escalation Vulnerability Cisco IOS XR Software Layer 2 Services Denial of Service Vulnerability This product is provided subject to this Notification and this Privacy & Use policy. | CISA |
| Mar 14, 2024 | CISA | Alert | CISA Releases Fifteen Industrial Control Systems Advisories These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-24-074-01 Siemens SENTRON 7KM PAC3x20 ICSA-24-074-02 Siemens Solid Edge ICSA-24-074-03 Siemens SINEMA Remote Connect Server ICSA-24-074-04 Siemens SINEMA Remote Connect Client ICSA-24-074-05 Siemens RUGGEDCOM APE1808 ICSA-24-074-06 Siemens SENTRON ICSA-24-074-07 Siemens SIMATIC ICSA-24-074-08 Siemens SCALANCE XB-200/XC-20… | CISA |
| Mar 14, 2024 | CISA | ICS Advisory | ICSA-24-074-08: Siemens SCALANCE XB-200 / XC-200 / XP-200 / XF-200BA / XR-300WG Family SCALANCE XB-200/XC-200/XP-200/XF-200BA/XR-300WG Family is affected by multiple vulnerabilities. CVE-2023-44318 and CVE-2023-44321 were previously published as part of SSA-699386. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens recommends countermeasures for products where fixes are not, or not yet available. | CISA |
| Mar 14, 2024 | CISA | ICS Advisory | ICSA-24-074-11: Siemens RUGGEDCOM APE1808 with Fortigate NGFW Devices Fortinet has published information on vulnerabilities in FORTIOS. This advisory lists the related Siemens Industrial products. Siemens has released a new version for RUGGEDCOM APE1808 and recommends to update to the latest version. Siemens is preparing further fix versions and recommends specific countermeasures for products where fixes are not, or not yet available. | CISA |
| Mar 14, 2024 | CISA | ICS Advisory | ICSA-24-074-05: Siemens RUGGEDCOM APE1808 Fortinet has published information on vulnerabilities in FORTIOS. This advisory lists the related Siemens Industrial products. Siemens has released a new version for RUGGEDCOM APE1808 and recommends to update to the latest version. Siemens is preparing further fix versions and recommends specific countermeasures for products where fixes are not, or not yet available. | CISA |
| Mar 12, 2024 | CISA | ICS Advisory | ICSA-24-072-01: Schneider Electric EcoStruxure Power Design Successful exploitation of this vulnerability may allow for arbitrary code execution. | CISA |
| Mar 12, 2024 | CISA | Alert | CISA Publishes SCuBA Hybrid Identity Solutions Guidance This initial publication reflects feedback gathered during its 2023 draft public comment period . In accordance with Executive Order 14028 , CISA’s SCuBA project aims to develop consistent, effective, modern, and manageable security that will help secure organizations’ information assets stored within cloud environments. | CISA |
| Mar 12, 2024 | CISA | Alert | CISA Releases One Industrial Control Systems Advisory These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-24-072-01 Schneider Electric EcoStruxure Power Design This product is provided subject to this Notification and this Privacy & Use policy. | CISA |
| Mar 12, 2024 | CISA | Alert | Fortinet Releases Security Updates for Multiple Products A cyber threat actor could exploit some of these vulnerabilities to take control of an affected system. FR-IR-23-390: FortiClientEMS - CSV injection in log download feature FR-IR-23-390: FortiClientEMS - CSV injection in log download feature FR-IR-23-328: FortiOS, FortiProxy - Out-of-bounds Write in captive portal FR-IR-23-328: FortiOS, FortiProxy - Out-of-bounds Write in captive portal FR-IR-24-013: FortiOS, FortiProxy - Authorization bypass in… | CISA |
| Mar 12, 2024 | CISA | Alert | Microsoft Releases Security Updates for Multiple Products A cyber threat actor could exploit some of these vulnerabilities to take control of an affected system. Microsoft Security Update Guide for March Microsoft Security Update Guide for March This product is provided subject to this Notification and this Privacy & Use policy. | CISA, JPCERT/CC |
| Mar 12, 2024 | CISA | Alert | Adobe Releases Security Updates for Multiple Products A cyber threat actor could exploit some of these vulnerabilities to take control of an affected system. This product is provided subject to this Notification and this Privacy & Use policy. | CISA |
| Mar 8, 2024 | CISA | Alert | Apple Released Security Updates for Multiple Products A cyber threat actor could exploit some of these vulnerabilities to take control of an affected system. This product is provided subject to this Notification and this Privacy & Use policy. | CISA |
| Mar 8, 2024 | CERT-EU | Advisory | 2024-026: Vulnerabilities in GitLab CODEOWNERS approval allowing stealing protected variables by utilising a crafted payload in an old feature branch to perform malicious actions. role of manage_group_access_tokens to rotate group access tokens with owner privileges. CERT-EU strongly recommends updating software installations to the latest versions by following the instructions given by the vendor [1]. | CERT-EU |
| Mar 7, 2024 | CERT-EU | Advisory | 2024-023: Vulnerabilities in JetBrains TeamCity Both vulnerabilities are authentication bypass vulnerabilities. If exploited, the most severe vulnerability allows for a complete compromise of a vulnerable TeamCity server by a remote unauthenticated attacker, including unauthenticated RCE [1,2]. | CERT-EU |
| Mar 7, 2024 | CERT-EU | Advisory | 2024-024: Vulnerabilities in VMware Products The most serious bugs could allow a malicious actor with local admin privileges on a virtual machine to execute code as the virtual machine’s VMX process running on the host. It is recommended upgrading affected software as soon as possible. | CERT-EU |
| Mar 7, 2024 | CERT-EU | Advisory | 2024-025: Zero-Day Vulnerabilities in Apple Products The two zero-day vulnerabilities, namely CVE-2024-23225 and CVE-2024-23296 , respectively exist in the iOS Kernel and RTKit. A memory corruption in those components would allow an attacker with arbitrary kernel read and write capability to bypass kernel memory protections. | CERT-EU |
| Mar 7, 2024 | NSA | Guidance | CSI: Account for Complexities Introduced by Hybrid Cloud and Multi-Cloud Environments The private cloud, often referred to as an on-premises (on-prem) solution, is an infrastructure provisioned for use by a single company, whereas the public cloud is provisioned for general use by many organizations. A multi-cloud environment, on the other hand, provisions multiple offerings from different cloud service providers. | NSA |
| Mar 7, 2024 | NSA | Guidance | CSI: Manage Cloud Logs for Effective Threat Hunting The many ways of accessing and managing a cloud tenant (often from anywhere in the world) can complicate the problem of security monitoring. Since cloud networks are virtualized, getting to “ground truth” can be difficult. Defense of a cloud tenant hinges on maintaining logs that record the right level of detail on security-relevant events. | NSA |
| Mar 7, 2024 | NSA | Guidance | CSI: Uphold the Cloud Shared Responsibility Model The threat landscape of the cloud differs from that of a traditional on-premises environment. An increasing reliance on the cloud brings new complexities and security challenges, and as a result, adversaries are increasingly targeting these environments. Customers often incorrectly assume that the cloud service provider (CSP) manages important aspects of safeguarding resources in the cloud that are not the CSP’s responsibility. | NSA |
| Mar 7, 2024 | NSA | Guidance | CSI: Secure Data in the Cloud Security | Cybersecurity Information As organizations move more of their data into cloud environments, the prevention of unauthorized access to that data is extremely important. Data stored in the cloud can take many forms depending on the needs of the organization. | NSA |
| Mar 7, 2024 | CISA | ICS Advisory | ICSA-24-067-01: Chirp Systems Chirp Access (Update C) Successful exploitation of this vulnerability could allow an attacker to adjust the Beacon configuration settings and/or disable the Bluetooth functionality of doors where non-networked Beacons are deployed. | CISA |
| Mar 7, 2024 | NSA | Guidance | CSI: Implement Network Segmentation and Encryption in Cloud Environments Security | Cybersecurity Information Network security is a crucial component for cloud users to configure properly. Historically, network security practices have focused on perimeter security, with few additional restrictions once authenticated to an organization’s internal network and the acceptance of unauthenticated and vulnerable “internal” protocols. | NSA |
| Mar 7, 2024 | NSA | Guidance | CSI: NSA’s Top Ten Cloud Security Mitigation Strategies As organizations continue to migrate to using cloud environments, these environments are becoming increasingly valuable targets for malicious cyber actors (MCA). Many cloud breaches occur due to misconfigurations in cloud tenants. NSA’s Top Ten Cloud Security Mitigation Strategies inform cloud customers of the most important practices to improve the security posture of their cloud environments. | NSA |
| Mar 7, 2024 | NSA | Guidance | CSI: Mitigate Risks from Managed Service Providers in Cloud Environments The growth of the public cloud has encouraged the development of numerous MSPs that primarily provide these services within the cloud rather than in customer on-premises networks. Both cloud resellers and other IT vendors offer such third-party services. | ASD/ACSC, CISA, NSA |
| Mar 7, 2024 | NSA | Guidance | CSI: Use Secure Cloud Key Management Practices Security | Cybersecurity Information Cryptographic operations enable secure communication, access control, authentication, and data encryption at rest. The security of these operations all rely on proper key management. Cloud service providers (CSPs) use key management systems (KMSs) to offer encryption and key management as a service, including functionality such as: Management operations on symmetric and asymmetric keys, including: applicat… | NSA |
| Mar 7, 2024 | NSA | Guidance | CSI: Enforce Secure Automated Deployment Practices through Infrastructure as Code These terms refer to templates that are used to deploy resources across on-premises and cloud infrastructures. IaC uses code to automate the deployment of compute, network, and storage services, as well as security policies (often denoted as policy as code). | NSA |
| Mar 7, 2024 | CISA | Alert | Apple Releases Security Updates for iOS and iPadOS A cyber threat actor could exploit one of these vulnerabilities to obtain sensitive information. This product is provided subject to this Notification and this Privacy & Use policy. | CISA |
| Mar 7, 2024 | CISA | Alert | Cisco Releases Security Updates for Secure Client A cyber threat actor could exploit one of these vulnerabilities to take control of an affected device. Cisco Secure Client Carriage Return Line Feed Injection Vulnerability Cisco Secure Client for Linux with ISE Posture Module Privilege Escalation Vulnerability This product is provided subject to this Notification and this Privacy & Use policy. | CISA |
| Mar 7, 2024 | CISA | Alert | CISA Releases One Industrial Control Systems Advisory These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-24-067-01 Chirp Systems Chirp Access This product is provided subject to this Notification and this Privacy & Use policy. | CISA |
| Mar 7, 2024 | CISA | Alert | CISA and NSA Release Cybersecurity Information Sheets on Cloud Security Best Practices Use Secure Cloud Identity and Access Management Practices Use Secure Cloud Key Management Practices Mitigate Risks from Managed Service Providers in Cloud Environments This product is provided subject to this Notification and this Privacy & Use policy. | CISA, NSA |
| Mar 7, 2024 | CISA | Alert | CISA Adds One Known Exploited JetBrains Vulnerability, CVE-2024-27198, to Catalog Reducing the Significant Risk of Known Exploited Vulnerabilities The impact of cybersecurity intrusions that leverage vulnerabilities in information technology and operational technology products threaten the public sector, the private sector, and ultimately the American people’s security and privacy. In 2020, industry partners identified a total of 18,358 new cybersecurity vulnerabilities, or Common Vulnerabilities and Exposures (CVEs). | CISA |
| Mar 6, 2024 | CISA | Alert | VMware Releases Security Advisory for Multiple Products A cyber threat actor could exploit one of these vulnerabilities to take control of an affected system. This product is provided subject to this Notification and this Privacy & Use policy. | CISA |
| Mar 5, 2024 | NSA | Guidance | CSI: Advancing Zero Trust Maturity Throughout the Network and Environment Pillar The Zero Trust network and environment pillar curtails adversarial lateral movement by employing controls and capabilities to logically and physically segment, isolate, and control access (on-premises and off-premises) through granular policy restrictions. | CISA, NSA |
| Mar 5, 2024 | CISA | Alert | CISA Releases Three Industrial Control Systems Advisories These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-24-065-01 Nice Linear eMerge E3-Series ICSMA-24-065-01 Santesoft Sante FFT Imaging ICSA-24-016-02 Integration Objects OPC UA Server Toolkit (Update A) This product is provided subject to this Notification and this Privacy & Use policy. | CISA |
| Mar 5, 2024 | CISA | ICS Medical Advisory | ICSMA-24-065-01: Santesoft Sante FFT Imaging Successful exploitation of this vulnerability could allow a local attacker to execute arbitrary code once a user opens a malicious DCM file on affected FFT Imaging installations. | CISA |
| Mar 5, 2024 | CISA | ICS Advisory | ICSA-24-065-01: Nice Linear eMerge E3-Series Successful exploitation of these vulnerabilities could allow a remote attacker to gain full system access. | CISA |
| Mar 1, 2024 | CISA | Alert | Cisco Releases Security Advisories for Cisco NX-OS Software A cyber threat actor could exploit one of these vulnerabilities to cause a denial-of-service condition. Cisco NX-OS Software MPLS Encapsulated IPv6 Denial of Service Vulnerability Cisco NX-OS Software External Border Gateway Protocol Denial of Service Vulnerability This product is provided subject to this Notification and this Privacy & Use policy. | CISA |