UCSF IT Technology

Patchstack released a security update to address a Critical Vulnerability in the WordPress AI Engine Plugin. For a complete description of the vulnerabilities and affected systems go to AI Engine Plugin Affected by Critical Vulnerability.IT Security

Microsoft released their January Security Update to address vulnerabilities in multiple Microsoft products. For a complete description of the vulnerabilities and affected systems go to Microsoft: January 9, 2024 “Patch Tuesday" Security Update Release .IT SecurityRead more about IT Security service offerings.

Cisco has released a security update to address vulnerabilities in Cisco Identity Services Engine (ISE). An authenticated attacker could perform privilege escalation to read or modify arbitrary files on the underlying operating system.

QNAP released security updates to address  multiple vulnerabilities in QNAP products.For a complete description of the vulnerabilities and affected systems go to QNAP Advisories.IT SecurityRead more about IT Security service offerings.

Threat Alert: NHS-Themed Lures Steal Microsoft Credentials Cybercriminals have launched a series of phishing attacks using spoofed or compromised email accounts belonging to the National Health Service (NHS). These emails, which appear to come from a NHS[.]net email address, use the subject line “YOU NEED TO SETTLE THIS.” A fully capitalized subject line like this is unlikely to come from an official government institution.   The lures contain a prompt to review an alleged DocuSign document.

Google has released security updates and recommended mitigations to address vulnerabilities including an Actively Exploited Zero-Day in Google Products.For a complete description of the vulnerabilities and affected systems go to:

Red Hat released multiple security updates in December for various Red Hat products.For a complete description of the vulnerabilities and affected systems go to Red Hat Security Advisories.IT SecurityRead more about IT Security service offerings.