CISA Security Advisories

The week of Microsoft’s Patch Tuesday is a always a busy time for security advisories on the the US government’s Cybersecurity and Infrastructure Security Agency (CISA) website.

Here are the current notifications, including Microsoft (of course), Apple, Mozilla and Adobe:

Microsoft Releases April 2023 Security Updates | CISA (Patch Tuesday article)

Adobe Releases Security Updates for Multiple Products | CISA

Fortinet Releases April 2023 Vulnerability Advisories | CISA

Mozilla Releases Security Advisories for Multiple Products | CISA

Apple Releases Security Updates for Multiple Products | CISA (I covered these here)

CISA also added a Microsoft vulnerability to its Known Exploited Vulnerabilities Catalog – it is being exploited but Patch Tuesday includes a fix for it:

CISA Adds One Known Exploited Vulnerability to Catalog | CISA

CISA also releases industrial control system advisories – if you are responsible for these types of systems you should monitor their news page:

Current Activity | CISA

My advice: Either you or your IT support need to check whether these issues impact your systems. You need to have a master document that details your systems, hardware, software, online, networks, back-ups, suppliers etc – so when cyber security (or operational) issues arise you and your support teams can quickly check if you are affected. From there you can take fast, effective action.

Patch Tuesday and more