Security Bulletin

The Wireshark Foundation has released 3 new versions of its popular network protocol analyzer. They are versions 4.2.1 (which fixes 5 CVEs and a number of other bugs), 4.0.12 (2 CVEs + additional...

ISC has implemented EDNS Client Subnet (ECS) for Resolvers in the BIND Supported Preview (-S) edition. This feature is not available in public (Open Source) BIND. BIND does not have an authoritative ECS feature At one time, BIND did offer an...

The SolarWinds SEC lawsuit illuminates the potential risks faced by CISOs and other cybersecurity executives.

A new threat actor just concluded a month and a half of two major leaks per day. Now comes phase two: follow-on attacks.

CISA released three Industrial Control Systems (ICS) advisories on January 4, 2024. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-24-004-01 Rockwell Automation...

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: Rockwell Automation Equipment: FactoryTalk Activation Manager Vulnerabilities: Out-of-Bounds Write 2. RISK EVALUATION Successful exploitation of...

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely/low attack complexity Vendor: Mitsubishi Electric Equipment: Multiple Factory Automation Products Vulnerabilities: Observable Timing Discrepancy, Double Free, Access of...

Organizations found it hard to keep up with vulnerabilities in 2023, often with dire consequences.

Follow these seven steps to more effectively manage mobile security.

(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.

More and more organizations are working with virtual CISOs to handle security-related responsibilities. Here are tips on how to find the right fit.