UCSF IT Technology

Google released its June Android update to address vulnerabilities in Android Devices.For a complete description of the vulnerabilities and affected systems go to Android Security Bulletin—June 2024.IT SecurityRead more about IT Security service offerings.

A security update was created to address a High PoC Available and other vulnerability affecting Progress Telerik Report Servers. A cyber threat actor could exploit these vulnerabilities to perform remote code execution (RCE).

Atlassian has released security updates to address a High PoC Available vulnerability affecting  Confluence Server and Data Center Instances. A cyber threat actor could exploit one of these vulnerabilities to perform remote code execution (RCE).

Check Point released security updates to address a High Actively Exploited Vulnerability in multiple Check Point products.  Successful exploitation of this vulnerability could allow for credential access to local accounts due to an arbitrary file read vulnerability. 

CISA warned organizations of an actively exploited  Linux Kernel Vulnerability.  An attacker could exploit this vulnerability to escalate their privileges.For a complete description of the vulnerabilities and affected systems go to CVE-2024-1086.IT SecurityRead more about IT Security service offerings.

Threat Alert: C

Threat Alert:

Ivanti has released security updates to address Critical and other vulnerabilities in multiple Ivanti Products. For a complete description of the vulnerabilities and affected systems go to Ivanti Security Advisory May 2024.IT Security

Veeam has released a security advisory to address Critical and other vulnerabilities in  Veeam Backup Enterprise Manager. An attacker could exploit these vulnerabilities to take over an affected system.For a complete description of the vulnerabilities and affected systems go to Veeam Backup Enterprise Manager Vulnerabilities (CVE-2024-29849, CVE-2024-29850, CVE-2024-29851, CVE-2024-29852).IT Security

GitHub released security updates to address a vulnerability in Mandiant reported a vulnerability in GitHub Enterprise Server (GHES) instances using SAML single sign-on (SSO) authentication.  A remote attacker could exploit this vulnerability to forge a SAML response and gain administrator privileges, providing unrestricted access to all of the instance's contents without requiring any authentication.