CCNPSecurity | ccnp_security | News

Hello everyone 😄 Please, those who have a premium account, boost the channel to activate the channel's stories

Microsoft September 2023 Patch Tuesday fixes 2 zero-days, 59 flaws Link(s): https://www.bleepingcomputer.com/news/microsoft/microsoft-september-2023-patch-tuesday-fixes-2-zero-days-59-flaws/ #Microsoft #CVE #HACK #SECURITY Main Channel: @CCNA_SECURITY News Channel: @CCNPSecurity

🆘🆘🆘CISA adds Citrix ShareFile flaw to the KEV catalog (Base Score: 9.8 CRITICAL) Link(s): - https://www.scmagazine.com/news/cisa-adds-citrix-sharefile-flaw-to-the-kev-catalog - https://nvd.nist.gov/vuln/detail/CVE-2023-24489 CVE(s): - CVE-2023-24489 #Citrix #Vulnerability #HACK #SECURITY Main Channel: @CCNA_SECURITY News Channel: @CCNPSecurity

This release consists of the following 74 Microsoft CVEs, and 2 advisories: Link(s): - https://msrc.microsoft.com/update-guide/releaseNote/2023-Aug #Microsoft #HACK #SECURITY Main Channel: @CCNA_SECURITY News Channel: @CCNPSecurity

🔴🔴🔴 New OpenSSH Vulnerability Exposes Linux Systems to Remote Command Injection Link(s): https://thehackernews.com/2023/07/new-openssh-vulnerability-exposes-linux.html?m=1 CVE(s): - CVE-2023-38408 #SSH #OpenSSH #Vulnerability #CVE #RCE #HACK #SECURITY Main Channel: @CCNA_SECURITY News Channel: @CCNPSecurity

Atlassian RCE Bugs Plague Confluence, Bamboo Link(s): https://www.darkreading.com/cloud/atlassian-rce-bugs-plague-confluence-bamboo CVE(s): - CVE-2023-22505 - CVE-2023-22508 - CVE-2023-22506 #Atlassian #Vulnerability #CVE #RCE #HACK #SECURITY Main Channel: @CCNA_SECURITY News Channel:

Citrix ADC and Citrix Gateway Security Bulletin for CVE-2023-3519, CVE-2023-3466, CVE-2023-3467 Link(s): https://support.citrix.com/article/CTX561482/citrix-adc-and-citrix-gateway-security-bulletin-for-cve20233519-cve20233466-cve20233467 CVE(s): CVE-2023-3466 CVE-2023-3467 CVE-2023-3519 #Citrix #HACK #SECURITY Main Channel: @CCNA_SECURITY News Channel: @CCNPSECURITY

🔴🔴🔴 VERY IMPORTANT 🔴🔴🔴

Zimbra urges admins to manually fix zero-day exploited in attacks Link(s): - https://www-bleepingcomputer-com.cdn.ampproject.org/c/s/www.bleepingcomputer.com/news/security/zimbra-urges-admins-to-manually-fix-zero-day-exploited-in-attacks/amp/ #Zimbra #Mail #Mailserver #Mail_server #zero_day #HACK #SECURITY Main Channel: @CCNA_SECURITY News Channel: @CCNPSECURITY

Fortinet Releases Security Update for FortiOS and FortiProxy Link(s): - https://www.fortiguard.com/psirt/FG-IR-23-183 - https://www.cisa.gov/news-events/alerts/2023/07/11/fortinet-releases-security-update-fortios-and-fortiproxy - https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-33308 CVE(s): - CVE-2023-33308 #Fortigate #Fortinet #RCE #HACK #SECURITY Main Channel: @CCNA_SECURITY News Channel: @CCNPSECURITY

Microsoft June 2023 Patch Tuesday fixes 78 flaws, 38 RCE bugs Link(s): - https://www.bleepingcomputer.com/news/microsoft/microsoft-june-2023-patch-tuesday-fixes-78-flaws-38-rce-bugs/ Critical CVE(s): - CVE-2023-24897 - CVE-2023-29357 - CVE-2023-32013 - CVE-2023-29363 - CVE-2023-32014 - CVE-2023-32015 #Microsoft #RCE #CVE #HACK #SECURITY

Fortinet fixes critical RCE flaw in Fortigate SSL-VPN devices, patch now Link(s): https://www.bleepingcomputer.com/news/security/fortinet-fixes-critical-rce-flaw-in-fortigate-ssl-vpn-devices-patch-now/?utm_source=dlvr.it&utm_medium=twitter CVE(s): CVE-2023-27997 #Fortigate #Fortinet #Firewall #VPN #RCE #CVE #HACK #SECURITY

New PowerExchange malware backdoors Microsoft Exchange servers Link(s): https://www.bleepingcomputer.com/news/security/new-powerexchange-malware-backdoors-microsoft-exchange-servers/ #Microsoft #Exchange #HACK #SECURITY Main Channel: @CCNA_SECURITY News Channel: @CCNPSECURITY

Microsoft Exchange Powershell Remoting Deserialization leading to RCE Link(s): https://starlabs.sg/blog/2023/04-microsoft-exchange-powershell-remoting-deserialization-leading-to-rce-cve-2023-21707/ CVE(s): CVE-2023-21707 #MicrosoftExchangePowershell #Exchange #Powershell #RCE #HACK #SECURITY Main Channel: @CCNA_SECURITY News Channel: @CCNPSECURITY

Fortinet Fixes Critical RCE Flaws in FortiNAC and FortiWeb Link(s): http://bleepingcomputer.com/news/security/fortinet-fixes-critical-rce-flaws-in-fortinac-and-fortiweb/ #Fortinet #Firewall #HACK #SECURITY Main Channel: @CCNA_SECURITY News Channel: @CCNPSECURITY

3CX desktop app compromised, abused in supply chain attack Link: https://www.techtarget.com/searchsecurity/news/365534265/3CX-desktop-app-compromised-abused-in-supply-chain-attack #3CX #HACK #SECURITY Main Channel: @CCNA_SECURITY News Channel: @CCNPSECURITY

Google Finds Dozens of Android Devices Can Be 'Silently' Compromised - Google's own Pixel 6, Pixel 6 Pro, Pixel 6a, Pixel 7, and Pixel 7 Pro - Samsung devices in the S22, M33, M13, M12, A71, A53, A33, A21, A13, A12, and A04 series - Vivo devices in the S16, S15, S6, X70, X60 and X30 series - Any wearables using the Exynos W920 chipset - Any vehicles using the Exynos Auto T5123 chipset #Link(s): https://www.pcmag.com/news/google-finds-dozens-of-android-devices-can-be-silently-compromised?taid=641688c5d66fa80001f7f6d6&utm_campaign=trueAnthem%3A+Trending+Content&utm_medium=trueAnthem&utm_source=twitter #Android #MobilePhone #HACK #SECURITY Main Channel: @CCNA_SECURITY News Channel: @CCNPSECURITY

New Critical Flaw in FortiOS and FortiProxy Could Give Hackers Remote Access Link(s): https://amp.thehackernews.com/thn/2023/03/new-critical-flaw-in-fortios-and.html FortiOS version 7.2.0 through 7.2.3 FortiOS version 7.0.0 through 7.0.9 FortiOS version 6.4.0 through 6.4.11 FortiOS version 6.2.0 through 6.2.12 FortiOS 6.0 all versions FortiProxy version 7.2.0 through 7.2.2 FortiProxy version 7.0.0 through 7.0.8 FortiProxy version 2.0.0 through 2.0.11 FortiProxy 1.2 all versions FortiProxy 1.1 all versions CVE(s): CVE-2023-25610 #Fortinet #RemoteAccess #HACK #SECURITY Main Channel: @CCNA_SECURITY News Channel: @CCNPSECURITY

Massive HTTP DDoS Attack Hits Record High of 71 Million Requests/Second Links: https://thehackernews-com.cdn.ampproject.org/c/s/thehackernews.com/2023/02/massive-http-ddos-attack-hits-record.html?amp=1 #Cloudflare #DDoS #HACK #SECURITY Main Channel: @CCNA_SECURITY News Channel: @CCNPSECURITY