UCSF IT Technology

Cisco has released security updates to address vulnerabilities in Multiple Cisco Products. For a complete description of the vulnerabilities and affected systems go to: Cisco Security Advisories.IT SecurityRead more about IT Security service offerings.

Apple has released security updates to address Actively Exploited Zero-Day and Other Vulnerabilities in multiple Apple products. Successful exploitation enables threat actors to execute arbitrary malicious code on devices running vulnerable iOS, macOS, and tvOS versions after opening a malicious web page.For a complete description of the vulnerabilities and affected systems go to: Apple Security Updates.IT Security

Cisco released a security advisory to address a vulnerability (CVE-2024-20253) affecting multiple Unified Communications Products. A cyber threat actor could exploit this vulnerability to take control of an affected system. 

The newly disclosed flaw is tracked as CVE-2024-0204 and is rated critical with a CVSS v3.1 score of 9.8 as it is remotely exploitable, allowing an unauthorized user to create admin users via the product’s administration portal. Creating arbitrary accounts with administrative privileges can lead to a complete device takeover. In the case of Go Anywhere MFT, that would allow attackers to access sensitive data, introduce malware, and potentially enable further attacks within the network.

Create and lead versatile multi-purpose online activities and resources for your program by using the UCSF Collaborative Learning Environment (CLE). We provide this service to you at no cost.  

Threat Alert: Phishing Lures Harvesting Credit Card Data 

Cisco has released  security updates to address a vulnerability in Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software for Firepower 2100 Series Appliances SSL/TLS.