Imperfect Forward Secrecy

Latest US-CERT Released Warnings

• VMware vCenter Server Vulnerability CVE-2021-22005 Under Active Exploit VMware vCenter Server Vulnerability CVE-2021-22005 Under Active Exploit Original release date: September 24, 2021On September 21, 2021, VMware disclosed that its vCenter Server is affected by an arbitrary file upload vulnerability—CVE-2021-22005—in the Analytics service. A malicious cyber actor with network access to port 443 can exploit this vulnerability[…]
  
  Created on: Sep 24, 2021 | 14:49 pm
  
  Sep 24, 2021 | 14:49 pm
• Google Releases Security Updates for Chrome Google Releases Security Updates for Chrome Original release date: September 24, 2021Google has released Chrome version 94.0.4606.61 for Windows, Mac, and Linux. This version addresses a vulnerability—CVE-2021-37973—that an attacker could exploit to take control of an affected system. An exploit for this vulnerability exists in the[…]
  
  Created on: Sep 24, 2021 | 11:42 am
  
  Sep 24, 2021 | 11:42 am
• Apple Releases Security Updates Apple Releases Security Updates Original release date: September 23, 2021Apple has released security updates to address vulnerabilities in multiple products. An attacker could exploit these vulnerabilities to take control of an affected system. These vulnerabilities have been detected in exploits in the wild.CISA encourages[…]
  
  Created on: Sep 23, 2021 | 15:11 pm
  
  Sep 23, 2021 | 15:11 pm
• Cisco Releases Security Updates for Multiple Products Cisco Releases Security Updates for Multiple Products Original release date: September 23, 2021Cisco has released security updates to address vulnerabilities in multiple Cisco products. An attacker could exploit some of these vulnerabilities to take control of an affected system.CISA encourages users and administrators to review the Cisco[…]
  
  Created on: Sep 23, 2021 | 07:06 am
  
  Sep 23, 2021 | 07:06 am
• CISA Releases Guidance: IPv6 Considerations for TIC 3.0 CISA Releases Guidance: IPv6 Considerations for TIC 3.0 Original release date: September 23, 2021The federal government has prioritized the transition of federal networks to Internet Protocol version 6 (IPv6) since the release of Office of Management and Budget (OMB) Memorandum 05-22 in 2005. In 2020, OMB renewed its focus[…]
  
  Created on: Sep 23, 2021 | 06:45 am
  
  Sep 23, 2021 | 06:45 am
• CISA, FBI, and NSA Release Joint Cybersecurity Advisory on Conti Ransomware  CISA, FBI, and NSA Release Joint Cybersecurity Advisory on Conti Ransomware  Original release date: September 22, 2021CISA, the Federal Bureau of Investigation (FBI), and the National Security Agency (NSA) have released a joint Cybersecurity Advisory (CSA) alerting organizations of increased Conti ransomware attacks. Malicious cyber actors use Conti ransomware to steal[…]
  
  Created on: Sep 22, 2021 | 10:00 am
  
  Sep 22, 2021 | 10:00 am
• Google Releases Security Updates for Chrome Google Releases Security Updates for Chrome Original release date: September 22, 2021Google has released Chrome version 94.0.4606.54  for Windows, Mac, and Linux. This version addresses vulnerabilities that an attacker could exploit to take control of an affected system.CISA encourages users and administrators to review the Chrome[…]
  
  Created on: Sep 22, 2021 | 08:36 am
  
  Sep 22, 2021 | 08:36 am
• NETGEAR Releases Security Updates for RCE Vulnerability NETGEAR Releases Security Updates for RCE Vulnerability Original release date: September 21, 2021NETGEAR has released security updates to address a remote code execution vulnerability—CVE-2021-40847—in multiple NETGEAR routers. A remote attacker could exploit this vulnerability to take control of an affected system.CISA encourages users and administrators to review[…]
  
  Created on: Sep 21, 2021 | 11:06 am
  
  Sep 21, 2021 | 11:06 am
• VMware Releases Security Updates VMware Releases Security Updates Original release date: September 21, 2021VMware has released security updates to address multiple vulnerabilities in vCenter Server and Cloud Foundation. A remote attacker could exploit some of these vulnerabilities to take control of an affected system.CISA encourages users and administrators[…]
  
  Created on: Sep 21, 2021 | 09:05 am
  
  Sep 21, 2021 | 09:05 am
• Apple Releases Security Updates for Multiple Products Apple Releases Security Updates for Multiple Products Original release date: September 21, 2021Apple has released security updates to address vulnerabilities in multiple products. An attacker could exploit some of these vulnerabilities to take control of an affected system.CISA encourages users and administrators to review the Apple security[…]
  
  Created on: Sep 21, 2021 | 08:56 am
  
  Sep 21, 2021 | 08:56 am