UCSF IT Technology

Google released its February Android update to address vulnerabilities in Android Devices.For a complete description of the vulnerabilities and affected systems go to: Android Security Bulletin—February 2024.IT Security

The Internet Systems Consortium (ISC) has released security updates to address vulnerabilities affecting ISC Berkeley Internet Name Domain (BIND). A remote attacker could exploit these vulnerabilities to potentially cause denial-of-service conditions.

Adobe has released security updates to address Critical and other vulnerabilities in multiple Adobe products. An attacker could exploit these vulnerabilities to perform arbitrary code execution, application denial-of-service, and memory leaks.

Ivanti has released security updates to address a High vulnerability in Ivanti Connect Secure and Ivanti Policy Secure. An attacker could exploit this vulnerability to bypass authentication.

Linux developers released a security update to address a Critical vulnerability in Linux Shim, a component crucial for the boot process in Linux-based systems. An attacker could exploit this vulnerability to install malware that operates at the firmware Level, presenting challenges for detection and removal.

VMware has released an Important security advisory to address vulnerabilities in VMware Aria Operations for Networks (formerly vRealize Network Insight).  A malicious user could exploit this vulnerability to take control of an affected system.

Cannon released a security advisory to address multiple Critical vulnerabilities affecting Cannon Small Office Multifunction Printers and Laser Printers.  An unauthenticated remote attacker could exploit these vulnerabilities to  execute arbitrary code and/or may be able to target the product in a Denial-of-Service (DoS) attack via the Internet.

Cisco released a security advisory to address multiple Critical vulnerabilities affecting the Cisco Expressway Series. An unauthenticated cyber threat actor could exploit these vulnerabilities to conduct cross-site request forgery (CSRF) attacks, which could allow the attacker to perform arbitrary actions on an affected device.