UCSF IT Technology

CISA has released an Industrial Controls Systems Medical Advisory (ICSMA) detailing a vulnerability in multiple Hillrom Welch Allyn cardiology products. A remote attacker could exploit this vulnerability to take control of an affected system. For a complete description of the vulnerabilities and effected systems, visit ICSMA-21-343-01: Hillrom Welch Allyn Cardio Products.

Zoho has released critical security updates to address vulnerabilities that is being actively exploited in ManageEngine Desktop and Desktop Central MSP. A remote attacker could exploit this vulnerability to take control of an affected system.

Apache has released a Critical security update to address a zero-day vulnerability that is being actively exploited in the Apache Log4j utility. A remote attacker could exploit this vulnerability to take control of an affected system. For a complete description of the vulnerabilities and effected systems, visit Apache Log4j vulnerability.

SonicWall has released a security advisory to address Critical and Medium Vulnerabilities in SonicWall SMA 100 series appliances. A remote attacker could exploit this vulnerability to take control of an affected system. For a complete description of the vulnerabilities and effected systems, visit SonicWall product security notice.

CISA and the Federal Bureau of Investigation (FBI) have released a joint Cybersecurity Advisory identifying active exploitation of a critical vulnerability in Zoho ManageEngine ServiceDesk Plus. A remote attacker could exploit this vulnerability to take control of an affected system For a complete description of the vulnerabilities and effected systems, visit:

Google has released Chrome version 95.0.4638.69 for Windows, Mac, and Linux to address vulnerabilities. This update protects against remote attackers using the vulnerability to to take control of an affected system. For a complete description of the vulnerabilities and effected systems, visit Stable Channel Update for Desktop. Read more about IT Security service offerings.