Hello all,The final Red-N Weekly Security newsletter for 2022 is below the notable callouts from this week.Notable Callouts: Cybersecurity protection is a continual game of whack-a-mole. Threat actors are continually popping up in new locations, via new holes and methods,…
Hello all,A few of the notable call-out’s from this week’s report (found below this introduction) are: Having up to date, monitored and effective internet security is sort of like owning a snow-blower in Buffalo NY. It doesn’t do much for…
Hello all, A few of the notable call-out’s from this week’s report (found below this introduction) are: I just read an interesting article that said Turkeys are notoriously difficult to hunt. They are well camouflaged and are “the smartest and…
Researchers Keep a Wary Eye on Critical New Vulnerability in Apache Commons Text (Text4Shell) Our new scanner for Text4Shell – Silent Signal Techblog – Scanner on Github Vulnerabilities in Cisco Identity Services Engine require your attention Heat left by users’…
QNAP patches zero-day used in new Deadbolt ransomware attacks Interpol and local Police dismantled an Asian Sextortion ring Zyxel has released patches for NAS products affected by a format string vulnerability HP fixes severe Privilege Escalation bug in pre-installed HP…
Microsoft shares workarounds for broken audio on Windows 10 after KB5015878 Cookie theft threat: When multi-factor authentication (MFA) is not enough CISA is warning of high-severity PAN-OS DDoS flaw used in attacks LastPass source code, blueprints stolen by intruder –…
Microsoft’s Secure Boot fix sends some PCs into BitLocker Recovery New macOS 12.5.1 and iOS 15.6.1 updates patch “actively exploited” vulnerabilities Microsoft will turn off TLS 1.0 and 1.1 in Internet Explorer and EdgeHTML on September 13 Exploit out for…
VMware urges admins to patch critical auth bypass bug immediately Cisco fixes critical remote code execution bug in VPN routers Millions of Arris routers are vulnerable to path traversal attacks Critical RCE Bug Could Let Hackers Remotely Take Over DrayTek…
Qakbot Resurfaces With New Playbook Beware New Windows Vulnerability With Remote Search Window Access Critical Filewave MDM Vulnerabilities Allow Attackers Full Mobile Device Control Critical security vulnerability in Grails could lead to remote code execution Update Google Chrome now! New…
Linux kernel team has sorted Retbleed chip flaw Microsoft warns that new Windows updates may break printing Cisco Releases Patches for Critical Flaws Impacting Nexus Dashboard for Data Centers CISA Urges Patch of Exploited Windows 11 Bug by August 2…
Microsoft July 2022 Patch Tuesday fixes exploited zero-day, 84 flaws CISA orders agencies to patch new Windows zero-day used in attacks A well presented listing of the Patch Tuesday updates from Adobe and Microsoft Microsoft investigates July updates breaking Access…
Cisco and Fortinet Release Security Patches for Multiple Products QNAP warns of new Checkmate ransomware targeting NAS devices Microsoft rolls back default macro blocks in Office without telling anyone Hackers claimed to have stolen data on as many as a…