Security bulletins

Warnings and recommendations from national cyber security agencies, newest first. Each brief is at most 120 words, bottom line first, and links to the publication it was written from.

BSI (DE) · Warning ·

Gemeinsamer Sicherheitshinweis (BfV und BSI) - Phishing über Messengerdienste

Read the original at www.bsi.bund.de (in German)

BSI (DE) · Warning ·

Version 1.2: Fortinet - Zero-Day Schwachstelle gefährdet Fortinet-Lösungen mit SAML SSO

Read the original at www.bsi.bund.de (in German)

BSI (DE) · Warning ·

Version 1.1: Cisco Secure Email - Lösungen werden aktiv angegriffen

Read the original at www.bsi.bund.de (in German)

BSI (DE) · Warning ·

Version 1.0: MongoDB - Aktiv ausgenutzte Schwachstelle erlaubt Offenlegung sensibler Daten

Read the original at www.bsi.bund.de (in German)

BSI (DE) · Warning ·

Version 1.0: WatchGuard Firebox - Aktive Ausnutzung einer Zero-Day Schwachstelle

Read the original at www.bsi.bund.de (in German)

BSI (DE) · Warning ·

Version 1.3 React Server Components - Kritische Schwachstelle bedroht zahlreiche Webanwendungen

Read the original at www.bsi.bund.de (in German)

NCSC (UK) · Guidance ·

Provisioning and managing certificates in the Web PKI

Read the original at www.ncsc.gov.uk

CISA · Advisory ·

Pro-Russia Hacktivists Conduct Opportunistic Attacks Against US and Global Critical Infrastructure

Read the original at www.cisa.gov

NCSC (UK) · Guidance ·

New Vulnerability Monitoring Service (VMS) from GDS now available in MyNCSC

Read the original at www.ncsc.gov.uk

NCSC (UK) · Guidance ·

Choosing a managed service provider (MSP)

Read the original at www.ncsc.gov.uk

BSI (DE) · Warning ·

Version 1.0: BIND - Proof of Concept bedroht DNS-Server

Read the original at www.bsi.bund.de (in German)

BSI (DE) · Warning ·

Version 1.0: Microsoft Exchange - Gefährdung für zehntausende Server nach Support-Ende für Versionen 2016 und 2019

Read the original at www.bsi.bund.de (in German)

BSI (DE) · Warning ·

Version 1.1: Microsoft WSUS - Notfallupdate schließt kritische Schwachstelle mit Proof-of-Concept

Read the original at www.bsi.bund.de (in German)

BSI (DE) · Warning ·

Version 1.0: F5 - Informationen über Schwachstellen abgegriffen

Read the original at www.bsi.bund.de (in German)

BSI (DE) · Warning ·

Version 1.0: SonicWall - Konfigurationsinformationen von Firewalls abgegriffen

Read the original at www.bsi.bund.de (in German)

BSI (DE) · Warning ·

Version 1.0: Redis - Kritische Schwachstelle gefährdet Redis-Server

Read the original at www.bsi.bund.de (in German)

CISA · Advisory ·

CISA Shares Lessons Learned from an Incident Response Engagement

Read the original at www.cisa.gov

NCSC (UK) · Guidance ·

External attack surface management (EASM) buyer's guide

Read the original at www.ncsc.gov.uk

BSI (DE) · Warning ·

Version 1.0: Citrix NetScaler ADC und NetScaler Gateway: Angriffe auf ungeschützte Instanzen

Read the original at www.bsi.bund.de (in German)

BSI (DE) · Warning ·

Version 1.1: SonicWall Gen 7 Firewalls - Ransomware-Angriffe beobachtet

Read the original at www.bsi.bund.de (in German)