Here is SANS’ excellent round-up of Microsoft’s Patch Tuesday: Microsoft May 2022 Patch Tuesday – SANS Internet Storm Centre There are the usual array of issues that Microsoft is fixing be they become an issue – one of the Windows patches fixes Windows LSA, this impacts the authentication of accounts …
CISA security advisory from Microsoft for various Azure products.
Microsoft Releases Security Advisory for Azure Data Factory and Azure Synapse Pipelines | CISA These are enterprise products – but you know the drill:
CISA Cisco updates notifications
This is an Enterprise level update. Cisco Releases Security Updates for Enterprise NFV Infrastructure Software | CISA Here are some more details that make it easier to see if this impacts you: VM escape and root access bugs fixed in Cisco NFV infrastructure software | ZDNet
CISA cyber security advisories – exploits, cisco devices, Firefox
F5 Releases Security Advisories Addressing Multiple Vulnerabilities | CISA Mozilla Releases Security Updates for Firefox and Firefox ESR | CISA CISA Adds Five Known Exploited Vulnerabilities to Catalog | CISA F5 is a company supplying infrastructure performance and security services to companies – so if you use them, get reading. …
Continue reading “CISA cyber security advisories – exploits, cisco devices, Firefox”
Flaw discovered in third-party code libraries used by hundreds of vendors
Among the vendors using uClibc and the uClibc variant uClibc-ng are Linksys, Netgear, Axis and Gentoo an embedded Linux distribution. This page from Ars Technica has links to the impacted devices: Gear from Netgear, Linksys, and 200 others has unpatched DNS poisoning flaw | Ars Technica Vendors were informed of …
Continue reading “Flaw discovered in third-party code libraries used by hundreds of vendors”