UCSF IT Technology

Apple releases security updates to address multiple vulnerabilities in iOS and macOS, including a zero-day flaw that is being actively exploited in the wild. An attacker could exploit some of these vulnerabilities to take control of an affected device. For a complete description of the vulnerabilities and affected systems go to Apple Security Updates. IT Security

A zero-day flaw in the latest version of a WordPress premium plugin known as WPGateway is being actively exploited in the wild. Exploitation of some of this vulnerability could allow a remote attacker to take control of an affected website. For a complete description of the vulnerabilities and affected systems go to Over 280,000 WordPress Sites Attacked. IT Security

Apple has released security updates to address vulnerabilities in multiple Apple products. An attacker could exploit some of these vulnerabilities to take control of an affected device. For a complete description of the vulnerabilities and affected systems go to  Apple Security Updates. IT Security

Palo Alto Networks Unit 42 created a response report to address attacks leveraging several vulnerabilities in D-Link devices. An attacker could exploit these vulnerabilities to take control of devices and conduct further attacks such as distributed denial-of-service (DDoS) attacks.

Google Chrome bug lets sites silently overwrite system clipboard content. The clipboard poisoning attack is said to have been accidentally introduced in Chrome version 104. A "major" security issue could allow malicious web pages to automatically overwrite clipboard content without requiring any user consent or interaction by simply visiting them. Threat actors could overwrite the clipboard with a link to specially crafted websites, leading victims to download dangerous software.