Author: DEFENDEDGE

Microsoft’s regularly scheduled March Patch Tuesday updates address 89 CVEs overall. Read more

Despite an explosion in the sheer amount of stolen data available on the Dark Web, the value of personal information is holding steady, according to the 2021 Dark Web price index from Privacy Affairs. That leaves these thriving dirty data dealers in a familiar predicament — they need to lock down their growing businesses for… Read more

The critical flaws exist in Adobe Framemaker, Connect and the Creative Cloud desktop application for Windows. Read more

Original release date: March 9, 2021 Adobe has released security updates to address vulnerabilities in multiple Adobe products. An attacker could exploit some of these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review the following Adobe Security Bulletins and apply the necessary updates. Framemaker APSB21-14 Creative Cloud Desktop… Read more

Apple pushed out security updates for a memory-corruption bug to devices running on iOS, macOS, watchOS and for Safari. Read more

Original release date: March 8, 2021 CISA has published a Remediating Microsoft Exchange Vulnerabilities web page that strongly urges all organizations to immediately address the recent Microsoft Exchange Server product vulnerabilities. As exploitation of these vulnerabilities is widespread and indiscriminate, CISA strongly advises organizations follow the guidance laid out in the web page. The guidance… Read more

A new side-channel attack takes aim at Intel’s CPU ring interconnect in order to glean sensitive data. Read more

Researchers warn two critical bugs impacting multiple QNAP firmware versions are under active attack. Read more

Original release date: March 8, 2021   High Vulnerabilities Primary Vendor — Product Description Published CVSS Score Source & Patch Info accellion — fta Accellion FTA 9_12_432 and earlier is affected by argument injection via a crafted POST request to an admin endpoint. The fixed version is FTA_9_12_444 and later. 2021-03-02 7.5 CVE-2021-27730 MISC apache… Read more

Original release date: March 6, 2021 Microsoft has released an updated script that scans Exchange log files for indicators of compromise (IOCs) associated with the vulnerabilities disclosed on March 2, 2021. CISA is aware of widespread domestic and international exploitation of these vulnerabilities and strongly recommends organizations run the Test-ProxyLogon.ps1 script—as soon as possible—to help… Read more