UCSF IT Technology

Cisco released a security update to address a Critical vulnerabilities in Cisco IP Phones. A remote attacker could exploit some of these vulnerabilities to take control of an affected system.

Red Hat released multiple security updates in February for various Red Hat products. For a complete description of the vulnerabilities and affected systems go to Red Hat February 2023 Archives by date. IT Security

Suse released multiple security updates in February for various Suse products. For a complete description of the vulnerabilities and affected systems go to Suse February 2023 Archives by date. IT Security Read more about IT Security service offerings.

Ubuntu released multiple security updates in February for various Ubuntu products. For a complete description of the vulnerabilities and affected systems go to Ubuntu February 2023 Archives by date. IT Security Read more about IT Security service offerings.

Mandiant reported a  a vulnerability in PHP.  An unauthorized user could exploit this vulnerability to to access or modify data. For a complete description of the vulnerabilities and affected systems go to CVE-2023-0568 Detail. IT Security

Threat Alert: What to Watch For Cybercriminals have launched numerous, different phishing attacks using timely tax-themed lures.  As multiple attacks are leveraging this topic, the lures will appear different.

Threat Alert: What to Watch For Cybercriminals have launched multiple phishing attacks attempting to take advantage of the humanitarian crisis in Turkey and Syria following the earthquake. These attacks are intended to steal recipient’s funds or to lead to the installation of malicious software (malware).  As multiple attacks are exploiting this crisis, lures will appear different.

VMware has released security updates to address a vulnerability in VMware Carbon Black App Control. A malicious attacker could exploit this vulnerability to take control of an affected system. For a complete description of the vulnerabilities and affected systems go to VMSA-2023-0004. IT Security

H-ISAC reported that a vulnerability in GitLab CE and EE weaponized and productized.