TTCSIRT-268.012020: TT-CSIRT ADVISORY – MICROSOFT RELEASES SECURITY ADVISORY ON INTERNET EXPLORER VULNERABILITY

  • Home
  • Archive for category "Security Advisories"
TTCSIRT-268.012020: TT-CSIRT ADVISORY – MICROSOFT RELEASES SECURITY ADVISORY ON INTERNET EXPLORER VULNERABILITY
By

Microsoft has released a security advisory to address a critical vulnerability in Internet Explorer. A remote attacker could exploit this vulnerability to take control of an affected system. TT-CSIRT encourages users and administrators to review Microsoft’s Advisory ADV20001 and CERT/CC’s Vulnerability Note VU#338824 for more information, implement workarounds, and apply updates when available. Consider using […]

Read More
TTCSIRT-267.012020: TT-CSIRT ADVISORY – GOOGLE CHROME SECURITY UPDATES
By

Google has released security updates to address vulnerabilities in Google Chrome in Windows, Mac, and Linux. An attacker could exploit some of these vulnerabilities to take control of an affected system. TTCSIRT encourages users and administrators to review the following release from Google and apply the necessary updates: https://chromereleases.googleblog.com/2020/01/stable-channel-update-for-desktop_16.html

Read More
TTCSIRT-266.011520: TT-CSIRT ADVISORY- MICROSOFT RELEASES JANUARY 2020 SECURITY UPDATES
By

Microsoft has released updates to address multiple vulnerabilities in Microsoft software. A remote attacker could exploit some of these vulnerabilities to take control of an affected system. The Trinidad and Tobago Cyber Security Incident Response Team (TTCSIRT) encourages users and administrators to review Microsoft’s January 2020 Security Update Summary and Deployment Information and apply the necessary […]

Read More
TTCSIRT-265.011520: TT-CSIRT ADVISORY- INTEL RELEASES SECURITY UPDATES
By

Intel has released security updates to address vulnerabilities in multiple products. An authenticated attacker with local access could exploit some of these vulnerabilities to gain escalation of privileges. The Trinidad and Tobago Cyber Security Incident Response Team (TTCSIRT) encourages users and administrators to review the following Intel advisories and apply the necessary updates: SNMP Subagent […]

Read More
TTCSIRT-264.011520: TT-CSIRT ADVISORY- VMWARE RELEASES SECURITY UPDATE
By

VMware has released a security update to address a vulnerability in VMware Tools. An attacker could exploit this vulnerability to take control of an affected system. The Trinidad and Tobago Cyber Security Incident Response Team (TTCSIRT) encourages users and administrators to review VMware Security Advisory VMSA-2020-0002 and apply the necessary update. For further review please […]

Read More
TTCSIRT-263.011520: TT-CSIRT ADVISORY- ADOBE RELEASES SECURITY UPDATES
By

Adobe has released security updates to address vulnerabilities in Illustrator CC and Experience Manager. An attacker could exploit some of these vulnerabilities to take control of an affected system. The Trinidad and Tobago Cyber Security Incident Response Team (TTCSIRT) encourages users and administrators to review Adobe Security Bulletins APSB20-03 and APSB20-01 and apply the necessary […]

Read More
TTCSIRT-262.011520: TT-CSIRT ADVISORY- ORACLE RELEASES JANUARY 2020 SECURITY BULLETIN
By

Oracle has released its Critical Patch Update for January 2020 containing 334 new security patches to address vulnerabilities across multiple products. A remote attacker could exploit some of these vulnerabilities to take control of an affected system. The Trinidad and Tobago Cyber Security Incident Response Team (TTCSIRT) encourages users and administrators to review the Oracle January […]

Read More
TTCSIRT-258.010620: TT-CSIRT ADVISORY- FORTIMAIL ADMIN PRIVILEGE ESCALATION
By

Two improper access control vulnerabilities in FortiMail admin webUI may allow administrators to perform privileged functions they should not be authorized for. Specifically, the two vulnerabilities are identified as the following: CVE-2019-15712: improper access control to web console CVE-2019-15707: improper access control to system backup config download Impact: Improper Access Control Affected Products: FortiMail 6.2.0, […]

Read More
TTCSIRT-259.010620: TT-CSIRT ADVISORY- DRAGONBLOOD VULNERABILITIES
By

Multiple vulnerabilities, referred to as Dragonblood, exist in WiFi WPA3 standard implementation . Dragonblood vulnerabilities impacting WiFi WPA3 standard implementations can cause password leak, denial of service or authorization bypass. They consist it: CVE-2019-9494: SAE cache attack against ECC groups (SAE side-channel attacks) CVE-2019-9495: EAP-PWD cache attack against ECC groups (EAP-PWD side-channel attack) CVE-2019-9496: SAE […]

Read More

Quick Navigation

Partner Agencies

Subscribe to Stay Updated!

Subscribe

Follow on social media:

Facebook-f X-twitter Linkedin-in Instagram