UCSF IT Technology

Google released its January Android update to address vulnerabilities in Android devices. The most severe of these issues is a high-security vulnerability that could lead to remote code execution with no additional execution privileges needed.For a complete description of the vulnerabilities and affected systems go to Android Security Bulletin January 2024.IT SecurityRead more about IT Security service offerings.

Illumina released a security update to address a vulnerability that impacts Illumina Gene Sequencers. An attacker could exploit this vulnerability to take over an affected deviceFor a complete description of the vulnerabilities and affected systems go to Report: Flaws in Illumina DNA Sequencer Devices Allows Hacks.IT SecurityRead more about IT Security service offerings.

A series of phishing attacks are impersonating financial institutions.

Ubuntu released multiple security updates in December for various Ubuntu products.For a complete description of the vulnerabilities and affected systems go to Ubuntu December 2024 Archives by date.IT SecurityRead more about IT Security service offerings.

Red Hat released multiple security updates in December for various Red Hat products.For a complete description of the vulnerabilities and affected systems go to Red Hat Security Advisories.IT SecurityRead more about IT Security service offerings.

Suse released multiple security updates in December for various Suse products.For a complete description of the vulnerabilities and affected systems go to Suse Dec 2024 Archives by date.IT SecurityRead more about IT Security service offerings.

WordPress released a security update to address a High vulnerability in the WordPress Partners Plugin. This vulnerability could be used to perform remote code execution. 

WordPress released  security updates to address Critical vulnerabilities in the WordPress WPLMS and VibeBP Plugins. These vulnerabilities could be exploited to perform unauthorized file uploads, privilege escalation and SQL injection attacks.

Adobe released a security update to address a High Vulnerability in Adobe ColdFusion. Successful exploitation of this vulnerability could lead to arbitrary file system read.For a complete description of the vulnerabilities and affected systems go to Security updates available for Adobe ColdFusion | APSB24-107. IT Security Read more about IT Security service offerings.

Cisco has released security updates to address a High vulnerability in Cisco NX-OS Software. Exploitation of the vulnerability could allow an unauthenticated attacker with physical access to an affected device, or an authenticated, local attacker with administrative credentials, to bypass NX-OS image signature verification.