UCSF IT Technology

Apple Released Emergency Updates to Address a Zero-Day Vulnerability in Multiple Apple Products. Attackers can exploit the vulnerability to break out of the Web Content sandbox.For a complete description of the vulnerabilities and affected systems, go to:

Experts warn of mass exploitation of Critical PHP flaw. An attacker could exploit the vulnerability to achieve remote code execution on vulnerable servers using Apache and PHP-CGI.For a complete description of the vulnerabilities and affected systems, go to: 

Elastic has released security updates to address Critical vulnerabilities in Elastic Kibana. An attacker could exploit this vulnerability to perform remote code execution.For a complete description of the vulnerabilities and affected systems, go to Kibana 8.17.3 Security Update (ESA-2025-06).IT Security Read more about IT Security service offerings.

Google released its March Android update to address Critical, 0-Day, and other vulnerabilities in Android devices. The most severe of these issues is a critical security vulnerability in the System component that could lead to remote code execution with no additional execution privileges needed. For a complete description of the vulnerabilities and affected systems, go to Android Security Bulletin March 2025.