Szolgáltatóknak

Microsoft has released security updates to address vulnerabilities in multiple products. A cyber threat actor could exploit some of these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review the following and apply the necessary updates: Microsoft Security Update Guide for March

Adobe released security updates to address multiple vulnerabilities in Adobe software. A cyber threat actor could exploit some of these vulnerabilities to take control of an affected system.  CISA encourages users and administrators to review the following Adobe Security Bulletins and apply the necessary updates: Adobe Experience Manager Adobe Premiere Pro Adobe ColdFusion Adobe Bridge Adobe Lightroom Adobe Animate

Fortinet released security updates to address vulnerabilities in multiple Fortinet products. A cyber threat actor could exploit some of these vulnerabilities to take control of an affected system.  CISA encourages users and administrators to review the following advisories and apply necessary updates:  FR-IR-23-390: FortiClientEMS - CSV injection in log download feature FR-IR-23-328: FortiOS, FortiProxy - Out-of-bounds Write in captive portal FR-IR-24-013: FortiOS, FortiProxy - Authorization bypass in SSLVPN bookmarks FR-IR-23-103: FortiWLM MEA for FortiManager - Improper access control in backup and restore features FR-IR-24-007: Pervasive SQL injection in DAS component

Aside from calling for immediate action from UnitedHealth, both Department of Health and Human Services Secretary Xavier Becerra and Labor Department Acting Secretary Julie Su also sought cooperation among insurance firms through the provision of interim payments and acceptance of paper claims.

Despite the elevated number of potentially vulnerable Fortinet instances, most of which were in the U.S. and India.

Attackers leveraging the 'no-reply@dropbox[.]com' domain sent emails with a Dropbox-hosted PDF to employees using the Darktrace SaaS environment.

Attackers leveraged phishing emails using contract-themed DocuSign lures that included PDF attachments.

Included in the affected entities were some of the country's ministerial services, according to a statement from the French Prime Minister's Office.

Threat actors were able to access patients' medical and health insurance details, as well as their birthdates and addresses, noted UT Southwestern in a filing with the Office of the Texas Attorney General.

Roku had accounts from 15,363 customers compromised following a credential stuffing attack between late December and late February.