UCSF IT Technology

Mandiant reported a vulnerability in Aruba Networks ArubaOS. Exploitation of this vulnerability could allow an attacker to execute arbitrary code. For a complete description of the vulnerabilities and affected systems go to CVE-2023-22747 Detail. IT Security  Read more about IT Security service offerings.

Mandiant reported a vulnerability in VMware Spring Security. Exploitation of this vulnerability could allow an attacker to execute arbitrary code. For a complete description of the vulnerabilities and affected systems go to CVE-2023-20862 Detail. IT Security  Read more about IT Security service offerings.

Threat Alert: Phishing Attacks Use Lawsuit-Themed Lures to Spread Malicious Scripts

Threat Alert: Social Engineering Attacks Target GitHub Developers

Threat Alert: What to Watch For Recent phishing emails are masquerading as notifications alerting the recipient to an automatic renewal of Best Buy’s Geek Squad Total Protect & Webroot Advance Threat Protection. The emails, however, do not use Best Buy sending addresses.  Unlike many traditional phishing attacks, the emails do not include malicious links or attachments.

D-Link released a security update to address a vulnerability in the D-Link Wi-Fi USB Adapter. An attacker could exploit this vulnerability to escalate their privileges.  For a complete description of the vulnerabilities and affected systems go to Software driver for D-Link Wi-Fi USB Adapter vulnerable to service path privilege escalation. IT Security