UCSF IT Technology

Cisco released a security update to address a High vulnerability in Cisco IOS XR Software. A remote attacker could exploit this vulnerability to cause a a denial of service (DoS) condition.

Mandiant reported vulnerabilities in Dell EMC PowerScale OneFS 9.4.0.2.  A remote attacker could exploit these vulnerabilities to take over the system, disclose information, or perform remote code execution.

Mandiant reported a vulnerability in GitHub Enterprise Server 3.7.0. A remote attacker could exploit this vulnerability to perform remote code execution.  For a complete description of the vulnerabilities and affected systems go to CVE-2022-46255 Detail IT Security Read more about IT Security service offerings.

Mandiant reported a vulnerability in NagVis for Nagios XI. A remote attacker could exploit this vulnerability to cause incorrect type conversion. For a complete description of the vulnerabilities and affected systems go to CVE-2022-3979 Detail. IT Security Read more about IT Security service offerings.

Android released its March Android update to address multiple vulnerabilities in Android Devices. The most severe of these issues is a critical security vulnerability in the System component that could lead to remote code execution with no additional execution privileges needed.

Threat Alert: What to Watch For  

The UCSF IT Security Awareness News You Can Use Newsletter includes monthly articles, contests, and upcoming events.  Learn about new threats and how to protect UCSF and yourself from data breaches.  You can also participate in contests to win prizes! November 2024Don't let the bad guys steal your holidays | See the red flags from our latest phishing campaignRead the November IT Security Awareness News You Can Use

Aruba released a security update to address Critical vulnerabilities in ArubaOS. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary code as a privileged user on the underlying operating system. For a complete description of the vulnerabilities and affected systems go to ArubaOS Multiple Vulnerabilities. IT Security