Alerts

VMware has released security updates to fix multiple vulnerabilities in VMware vCenter Server and Cloud Foundation. The addressed vulnerabilities could allow the attacker to execute arbitrary code, cause memory corruption, a denial of services attack, or an out-of-bound write/read on the affected system. Sample of the addressed vulnerabilities: 1. VMware vCenter Server heap-overflow Vulnerability (CVE-2023-20892): […]

Apple has released security updates to address multiple vulnerabilities across multiple products. The severity of the addressed vulnerabilities could allow the attacker to execute arbitrary code, gain access or gain elevated privileges on the affected systems by persuading a victim to visit a specially crafted web site. Sample of the addressed vulnerabilities: 1. Apple macOS

Cisco has released security updates to fix multiple vulnerabilities across multiple products. The addressed vulnerabilities could allow the attacker to perform a cross-site scripting attack by persuading a user of an affected interface to click a crafted link or bypass security restrictions on Cisco Duo caused by the incorrect handling of responses from Cisco Duo

Juniper has released security updates to fix a vulnerability across Junos OS and Junos OS Evolved. The addressed vulnerability could allow the remote attacker to cause a denial of service attack on the affected products by sending a BGP update containing a specific, optional transitive attribute. Juniper Networks Junos OS and Junos OS Evolved Denial

Fortinet has released a security update to fix several vulnerabilities in multiple versions of FortiOS and FortiProxy. The addressed vulnerabilities could allow the attacker to cause a denial of service attack by sending a specially crafted request to the affected products. Sample of the addressed vulnerabilities: Fortinet FortiOS and FortiProxy Denial of Service (CVE-2023-33306): CVSS:

Palo Alto has released security updates to fix several vulnerabilities in PAN-OS and GlobalProtect App. The addressed vulnerabilities could allow the attacker to execute a JavaScript payload in the context of an authenticated Captive Portal user’s browser or gain elevated privileges on the affected system. The addressed vulnerabilities: 1. GlobalProtect App: Local Privilege Escalation Vulnerability

VMware has released a security update to fix a vulnerability in VMware Tools. The addressed vulnerability could allow the attacker to bypass security restrictions and obtain access to the guest virtual machine of the affected versions. the addressed vulnerability: VMware Tools Security Bypass Vulnerability (CVE-2023-20867): CVSS: 3.9 Attack Vector: Local Attack Complexity: High Privileges Required:

Zoom has released security updates to address several vulnerabilities in Windows, MacOS, and Linux. The addressed vulnerabilities could allow the attacker to cause a denial of service, gain privileges, bypass security restrictions, obtain information, and perform cross-site scripting on the affected systems. Sample of the addressed vulnerabilities: 1. Zoom for Windows, Zoom Rooms for Windows,

Google has released an updated Chrome version (114.0.5735.133/134) for Windows and (114.0.5735.133) for Mac and Linux to fix multiple vulnerabilities. The addressed vulnerabilities could allow the remote attacker to gain access, cause the application to crash, or execute arbitrary code on the affected system by persuading the victim to visit a specially crafted website. Sample

SAP has released security updates to address several vulnerabilities affecting multiple products. In addition, SAP also announced (5) updates to the previously released patch day security notes. This month’s patch fixes several vulnerabilities affecting multiple SAP products such as SAP Knowledge Warehouse, SAP UI5 Variant Management, SAP Plant Connectivity, SAPUI5, SAP S/4HANA, SAP NetWeaver (Design

Fortinet has released security updates to fix several vulnerabilities in multiple Fortinet products. The addressed vulnerabilities could allow the attacker to obtain sensitive information, cause a denial of service attack, obtain sensitive information, execute arbitrary code, and gain access to the affected products by sending specially crafted requests. Sample of the addressed vulnerabilities: 1. Fortinet

Stealth Soldier is a newly developed and tailored malware that has been strategically deployed in recent espionage campaigns specifically focused on North Africa. Stealth Soldier is a customized malware used in targeted attacks, enabling surveillance operations with features such as keystroke logging, screenshot capturing, and microphone recording. The Tactics and Techniques of Stealth Soldier Malware:

Trend Micro has released security updates to address multiple vulnerabilities in Apex One, and Apex One as a Service. The addressed vulnerabilities could allow the attacker to escalate privileges and write an arbitrary value to specific Trend Micro agent subkeys on the affected products. The attacker must be able to execute low-privileged code on the