UCSF IT Technology

Cisco has released security updates to address vulnerabilities in Cisco Finesse Web-Based Management Interface. Unauthenticated Remote Attackers could exploit these vulnerabilities to perform a stored cross site-scripting (XSS) attack.

ASUS released security updates to address a Critical vulnerability in multiple ASUS Router Models. Unauthenticated attackers could exploit this vulnerability to log into affected devices.For a complete description of the vulnerabilities and affected systems go to ASUS Router - Improper Authentication.IT Security

Juniper Networks released security updates to address Critical and other vulnerabilities affecting multiple Juniper Secure Analytics. A cyber threat actor could exploit some of these vulnerabilities to take control of an affected system.

A security update was created to address an Actively Exploited Critical vulnerability affecting Progress Telerik Report Servers. A cyber threat actor could exploit this vulnerability to supply specific parameters and create a new administrator user, which they can then use to login to the server.

The Protect AI Security Firm warns of Easily Exploitable Critical vulnerabilities in various open-source AI/ML tools. A cyber threat actor could exploit these vulnerabilities to disclose information, access to restricted resources, privilege escalation, and complete server takeover.

Microsoft released a security update to address a zero-click High vulnerability in Microsoft Outlook. An attacker can exploit this vulnerability to perform remote code execution (RCE).

Google released June Pixel Update to address a Zero-Day High and other vulnerabilities in Pixel Devices. Attackers could exploit the zero-day vulnerability to elevate their privileges. 

Cisco has released security updates to address vulnerabilities in multiple Cisco Products.For a complete description of the vulnerabilities and affected systems go to Cisco Security Advisories.IT SecurityRead more about IT Security service offerings.

Google has released new versions of Chrome.For a complete description of the vulnerabilities and affected systems go to Chrome Releases.IT SecurityRead more about IT Security service offerings.

VMware has released security updates to address critical vulnerabilities affecting multiple VMware products. Successful exploitation of these vulnerabilities could allow for remote code execution in the context of the administrator account.