Other companies gather around Microsoft’s Patch Tuesday and issue their updates round and about the same time and there are also the critical patches that are issued when needed. Here are some that are in the news but you should be checking your systems for updates:
AWS fixes vulnerability affecting container image repository – The Record by Recorded Future
NSA: critical Citrix flaw under attack from China • The Register
The US government Cybersecurity and Infrastructure Security Agency (CISA) keeps a check on security updates and is a good resource.
Apple Releases Security Updates for Multiple Products | CISA
Microsoft Releases December 2022 Security Updates | CISA
Citrix Releases Security Updates for Citrix ADC, Citrix Gateway | CISA
Mozilla Releases Security Updates for Thunderbird and Firefox | CISA
VMware Releases Security Updates for Multiple products | CISA
Fortinet Releases Security Updates for FortiOS | CISA
And then there is advice on specific threats and risks:
NSA, CISA, and ODNI Release Guidance on Potential Threats to 5G Network Slicing | CISA
CISA also releases industrial control system advisories – if you are responsible for these types of systems you should monitor their news page:
There is a lot of work out there to keep your systems safe – so any automation you can deploy is useful, but things need to be monitored and checked. Do you do that?
Tomorrow’s article on CyberAwake will be looking at monitoring, checking and alerts.
Clive Catton MSc (Cyber Security) – by-line and other articles
My advice: Either you or your IT support need to check whether these issues impact your systems. You need to have a master document that details your systems, hardware, software, online, networks, back-ups, suppliers etc – so when cyber security (or operational) issues arise you and your support teams can quickly check if you are affected. From there you can take fast, effective action.
Please Note:
I am on leave so the news this week is “in brief”. You can still contact me via the contact page and Octagon Technology.
