Alerts & Advisories

TTCSIRT-154.080718: TT-CSIRT Advisory – Mozilla Security Updates

Mozilla has released a security update stating that it has found the following critical vulnerabilities within Mozilla Thunderbird ver 60.0: a) Bug #1459162 – a buffer overflow can occur when…

Read More
TTCSIRT-153.080718: TT-CSIRT Advisory – Drupal Security Updates

Drupal has released a security update stating that a vulnerability has been discovered in Drupal ver 8.5.5 and before where within the Symfony Library an attacker can override the path…

Read More
The Disconnect Between Understanding Email Threats and Preventing Them

Email continues to be the starting point for the majority of all security breaches. The 2018 Verizon Data Breaches Investigation Report (DBIR) says that email is the attack vector in…

Read More
Attackers Circumvent Two Factor Authentication Protections to Hack Reddit

Online community site Reddit announced Wednesday that it was breached in June 2018. In a refreshingly candid advisory, it provides a basic explanation of how the incident occurred, details on…

Read More
Phishing Campaign Targets Four Hundred Industrial Organizations

A new wave of spear-phishing emails masquerading as legitimate procurement and accounting letters have hit over 400 industrial organizations, according to Kaspersky Lab. Data collected by Kaspersky showed that the…

Read More
TTCSIRT-152.080218: TT-CSIRT Advisory – Cisco Security Updates

Cisco has released a security update stating that a vulnerability in the password change function of Cisco Prime Collaboration Provisioning could allow an authenticated, remote attacker to cause the system…

Read More