Security Bulletin

CISA released three Industrial Control Systems (ICS) advisories on October 31, 2023. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-23-304-02 INEA ME RTU ICSA-23-304-03...

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 9.9 ATTENTION: Exploitable remotely/low attack complexity Vendor: INEA Equipment: ME RTU Vulnerabilities: OS Command Injection, Improper Authentication 2. RISK EVALUATION Successful exploitation of these...

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: Zavio Equipment: IP Camera Vulnerability: Improper Restriction of Operations within the Bounds of a Memory Buffer, OS Command Injection 2. RISK...

CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2023-46747 F5 BIG-IP Authentication Bypass Vulnerability CVE-2023-46748 F5 BIG-IP SQL Injection Vulnerability These...

Here’s why we need to rethink firewalls for cloud-native applications.

(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.

At ISC, we follow a published policy in determining whether and how to disclose defects discovered in our software products. Applicable Versions Supported Versions This policy applies to all currently-supported versions of our open source products...

An advanced feature of Google targeted ads can allow a rarely precedented flood of malware infections, rendering machines completely useless.

The theme for DistiNext 2023 was Growing Together. This theme ties perfectly into our theme for Americas Distribution, Going Hypersonic to Fuel Partner Success.

The new EO seen as a response to growing concern over the potential risks around AI and how to best reap the benefits while also delivering security.

Politicians are suggesting massive cuts to CISA's budget, threatening its missions to secure federal networks and help critical infrastructure operators fend off cyberattacks.