Version 1.2: Microsoft SharePoint - Massive Ausnutzung einer Zero-Day Schwachstelle
Read the original at www.bsi.bund.de (in German)
Security bulletins
Warnings and recommendations from national cyber security agencies, newest first. Each brief is at most 120 words, bottom line first, and links to the publication it was written from.
Version 1.1: Citrix NetScaler ADC & NetScaler Gateway - Kritische Sicherheitslücken geschlossen und teils aktiv ausgenutzt
Read the original at www.bsi.bund.de (in German)
Version 1.1: Ivanti EPMM - Zero-Day Schwachstellen werden aktiv ausgenutzt
Read the original at www.bsi.bund.de (in German)
New DNS Check service in MyNCSC is being expanded to include more DNS related issues
Decommissioning assets
Software Security Code of Practice - Assurance Principles and Claims (APCs)
Version 1.0: Fortinet FortiOS - Angreifende installierten persistenten Lesezugriff auf Firewalls
Read the original at www.bsi.bund.de (in German)
Version 1.1: Ivanti Connect Secure - Kritische Schwachstelle in End-of-Support und ungepatchten Systemen ausgenutzt
Read the original at www.bsi.bund.de (in German)
New feature: View and manage Early Warning findings in MyNCSC
Information zur Umstellung beim Versand von Warnungen
Read the original at www.bsi.bund.de (in German)
Version 1.0: Kubernetes - Kritische Schwachstelle im Ingress NGINX Controller ermöglicht Clusterübernahme
Read the original at www.bsi.bund.de (in German)
Timelines for migration to post-quantum cryptography
New DNS Check service now available in MyNCSC
Network security fundamentals
Guidance on digital forensics and protective monitoring specifications for producers of network devices and appliances
Version 1.0: SonicWall SonicOS - Proof-of-Concept Exploit für Schwachstelle im SSLVPN veröffentlicht
Read the original at www.bsi.bund.de (in German)
Version 1.0: SonicWall SMA 1000 Serie - Zero-Day Schwachstelle in Management Konsole geschlossen
Read the original at www.bsi.bund.de (in German)
Version 1.0: Microsoft Windows - Kritische Schwachstelle in Windows OLE
Read the original at www.bsi.bund.de (in German)
Version 1.0: Fortinet FortiOS & FortiProxy - Aktive Ausnutzung einer Zero-Day Schwachstelle
Read the original at www.bsi.bund.de (in German)
Version 1.0: Ivanti Connect Secure - Zero-Day Angriffe beobachtet
Read the original at www.bsi.bund.de (in German)