UCSF IT Technology

Atlassian has released security updates to address a Critical vulnerability affecting outdated Confluence Server and Data Center Instances. A cyber threat actor could exploit one of these vulnerabilities to perform remote code execution

Citrix has released security updates to address Actively Exploited Zero-Day Vulnerabilities in Citrix Netscaler ADC and Gateway. An attacker could exploit these vulnerabilities to perform remote code execution and denial-of-service attacks.

Google has released new versions of Chrome to address an Actively Exploited Zero-Day and other Vulnerabilities. For a complete description of the vulnerabilities and affected systems go to: Chrome Releases.IT SecurityRead more about IT Security service offerings.

Oracle released their January Critical Patch Update to address vulnerabilities in Oracle products. For a complete description of the vulnerabilities and affected systems go to: January 2024 Critical Patch Update Advisory.IT Security

Drupal has released security updates to address a vulnerability in multiple versions of Drupal.  A malicious cyber actor could exploit this vulnerability to cause a denial-of-service condition.For a complete description of the vulnerabilities and affected systems go to: SA-CORE-2024-001.IT Security

VMware has released a security update to address a Critical vulnerability in VMware Aria Automation (formerly vRealize Automation) and Cloud Foundation. An authenticated malicious actor may exploit this vulnerability leading to unauthorized access to remote organizations and workflows.

GitLab released a security update to address a Critical vulnerability in GitLab. Attackers can exploit this vulnerability to take over an affected system.

SonicWall has released security updates to address Critical and High vulnerabilities in SonicWall Firewalls. An attacker could exploit these vulnerabilities to cause a denial-of-service (DoS) condition and possibly remote code execution (RCE). Scanning the internet for vulnerable devices, Bishop Fox discovered that more than 178,000 of the SonicWall firewalls that have a publicly accessible web management interface are vulnerable to at least one of the security defects.For a complete description of the vulnerabilities and affected systems go to: 

Juniper Networks released security updates to address a Critical vulnerability affecting Juniper SRX Series firewalls and EX Series switches.  A cyber threat actor could exploit this vulnerability to perform remote code execution (RCE), get root privileges, or launch a denial of service (DoS) attack.

Apple has released a security update to address a vulnerability in the Apple magic keyboard. A nearby attacker can connect to a vulnerable device over unauthenticated Bluetooth and inject keystrokes to eg. install apps, run arbitrary commands, forward messages, etc.,For a complete description of the vulnerabilities and affected systems go to: Apple Magic Keyboard Update.IT Security