UCSF IT Technology

Nozomi Networks has disclosed a potentially serious vulnerability affecting a C standard library used by several major companies. A remote attacker could perform DNS poisoning attacks against the target device.

Google has released Chrome version 101.0.4951.41 for Windows, Mac, and Linux. A remote attacker could exploit this vulnerability to take control of an affected system.

WSO2 has updated a security advisory to address a Critical vulnerability, with indications of exploitation, impacting multiple products. An attacker could exploit this vulnerability to perform unrestricted arbitrary file upload, and remote code execution.

CISA, the Department of Energy (DOE), the National Security Agency (NSA), and the Federal Bureau of Investigation (FBI) warn advanced persistent threat (APT) actors can gain full system access to multiple industrial control system (ICS)/supervisory control and data acquisition (SCADA) devices using custom-made tools. Successful exploitation of this vulnerability could allow a remote attacker to access and control ICS/SCADA Devices.