Microsoft Releases February 2023 Security Updates

Microsoft has released updates to address multiple vulnerabilities in Microsoft software. An attacker can exploit some of these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review Microsoft’s February 2023 Security Update Guide and Deployment...

Apple Releases Security Updates for Multiple Products

Apple has released security updates to address vulnerabilities in multiple products. An attacker could exploit these vulnerabilities to take control of an affected device. CISA encourages users and administrators to review the Apple security updates page for the following products and apply the...

KB5022923: Servicing stack update for Windows Server 2012: February 14, 2023

KB5022923: Servicing stack update for Windows Server 2012: February 14, 2023 IMPORTANT For Windows Server 2012, the end of support EOS date is October 10, 2023. Extended Security Updates ESUs will be available for purchase no later than October 2022, but available for installation after the EOS...

Adobe Releases Security Updates for Multiple Products

Adobe has released security updates to address multiple vulnerabilities in Adobe software. An attacker can exploit these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review the following Adobe Security Bulletins and apply the necessary updates...

Security Updates for Microsoft Visual Studio Products (February 2023)

The Microsoft Visual Studio Products are missing security updates. It is, therefore, affected by multiple vulnerabilities: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. CVE-2023-21808, CVE-2023-21815,...

A week in security (February 6 - 12)

Last week on Malwarebytes Labs: Two year old vulnerability used in ransomware attack against VMware ESXi On the 20th Safer Internet Day, what was security like back in 2004? Florida hospital takes entire IT systems offline after 'ransomware attack' Introducing Malwarebytes Mobile Security for...

About the security content of macOS Ventura 13.2.1

About the security content of macOS Ventura 13.2.1 This document describes the security content of macOS Ventura 13.2.1. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or...

About the security content of iOS 16.3.1 and iPadOS 16.3.1

About the security content of iOS 16.3.1 and iPadOS 16.3.1 This document describes the security content of iOS 16.3.1 and iPadOS 16.3.1. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and...

About the security content of macOS Ventura 13.2.1

About the security content of macOS Ventura 13.2.1 This document describes the security content of macOS Ventura 13.2.1. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or...

Fedora 37 : qt5-qtbase / qt6-qtbase (2023-f2965f082c)

The remote Fedora 37 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2023-f2965f082c advisory. Fix a possible DOS involving the Qt SQL ODBC driver plugin. Tenable has extracted the preceding description block directly from the Fedora security advisory...

OpenSSL Fixes Multiple New Security Flaws with Latest Update

The OpenSSL Project has released fixes to address several security flaws, including a high-severity bug in the open source encryption toolkit that could potentially expose users to malicious attacks. Tracked as CVE-2023-0286, the issue relates to a case of type confusion that may permit an...

RHEL 8 : openvswitch2.17 (RHSA-2023:0688)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:0688 advisory. Open vSwitch provides standard network bridging functions and support for the OpenFlow protocol for remote per-flow control of traffic...

Google Chrome Security Updates (stable-channel-update-for-desktop-2023-02) - Mac OS X

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...

Moderate: Red Hat Security Advisory: RHSA: Submariner 0.14 - bug fix and security updates

Submariner 0.14 packages that fix various bugs and add various enhancements that are now available for Red Hat Advanced Cluster Management for Kubernetes version 2.7 Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS...

RHEL 7 : rh-git227-git (RHSA-2023:0597)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:0597 advisory. Git is a distributed revision control system with a decentralized architecture. As opposed to centralized version control systems with a...

Moderate Photon OS Security Update - PHSA-2023-4.0-0328

Updates of 'redis', 'libtiff' packages of Photon OS have been released...

[update]Two year old vulnerability used in ransomware attack against VMware ESXi

On Friday and over the weekend, several Computer Emergency Response Teams CERTs sounded the alarm about an ongoing large scale ransomware attack on VMware ESXi virtual machines. With some discrepancies between Shodan queries from various researchers, most agree that an estimated 500 entities were...

RHEL 8 : git (RHSA-2023:0596)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:0596 advisory. Git is a distributed revision control system with a decentralized architecture. As opposed to centralized version control systems with a...

RHEL 8 : git (RHSA-2023:0609)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:0609 advisory. Git is a distributed revision control system with a decentralized architecture. As opposed to centralized version control systems with a...

RHEL 8 : git (RHSA-2023:0599)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:0599 advisory. Git is a distributed revision control system with a decentralized architecture. As opposed to centralized version control systems with a...