Month: August 2023

Mediatek products privilege escalation | CVE-2023-20786

August 8, 2023

NAME__________Mediatek products privilege escalationPlatforms Affected:MediaTek Android MediaTek ChipsetsRisk Level:6.7Exploitability:UnprovenConsequences:Gain Privileges DESCRIPTION__________Mediatek products could allow a local authenticated attacker to gain...

Mediatek products privilege escalation | CVE-2023-20795

August 8, 2023

Mediatek Chipsets privilege escalation | CVE-2023-20808

August 8, 2023

NAME__________Mediatek Chipsets privilege escalationPlatforms Affected:MediaTek MT9688 MediaTek MT9022 MediaTek MT9618 MediaTek MT9649 MediaTek MT9653Risk Level:4.4Exploitability:UnprovenConsequences:Gain Privileges DESCRIPTION__________Mediatek Chipsets could allow...

Mediatek Chipsets information disclosure | CVE-2023-20818

August 8, 2023

NAME__________Mediatek Chipsets information disclosurePlatforms Affected:Mediatek MT6873 Mediatek MT6877 Mediatek MT6883 Mediatek MT6885 Mediatek MT6889 Mediatek MT6893 Mediatek MT6879 Mediatek MT6895...

Mediatek Chipsets information disclosure | CVE-2023-20810

August 8, 2023

NAME__________Mediatek Chipsets information disclosurePlatforms Affected:MediaTek MT5221 MediaTek MT9688Risk Level:4.4Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________Mediatek Chipsets could allow a local authenticated attacker to obtain...

Mediatek Chipsets privilege escalation | CVE-2023-20809

August 8, 2023

NAME__________Mediatek Chipsets privilege escalationPlatforms Affected:MediaTek MT9688 MediaTek MT5583Risk Level:4.4Exploitability:UnprovenConsequences:Gain Privileges DESCRIPTION__________Mediatek Chipsets could allow a local authenticated attacker to gain...

Mediatek products privilege escalation | CVE-2023-20783

August 8, 2023

Mediatek Chipsets privilege escalation | CVE-2023-20816

August 8, 2023

NAME__________Mediatek Chipsets privilege escalationPlatforms Affected:Mediatek MT6873 Mediatek MT6877 Mediatek MT6883 Mediatek MT6885 Mediatek MT6889 Mediatek MT6893 Mediatek MT6879 Mediatek MT6895...

Mediatek Chipsets privilege escalation | CVE-2023-20807

August 8, 2023

NAME__________Mediatek Chipsets privilege escalationPlatforms Affected:Mediatek MT6895 Mediatek MT6983Risk Level:4.4Exploitability:UnprovenConsequences:Gain Privileges DESCRIPTION__________Mediatek Chipsets could allow a local authenticated attacker to gain...

Mediatek products privilege escalation | CVE-2023-20784

August 8, 2023

Mediatek products information disclosure | CVE-2023-20790

August 8, 2023

NAME__________Mediatek products information disclosurePlatforms Affected:MediaTek Android MediaTek ChipsetsRisk Level:4.4Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________Mediatek products could allow a local authenticated attacker to obtain...

Mediatek products privilege escalation | CVE-2023-20787

August 8, 2023

CISA

CISA: CISA Adds One Known Exploited Vulnerability to Catalog

August 8, 2023

CISA Adds One Known Exploited Vulnerability to Catalog CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog,...

CISA

CISA: Ivanti Releases Security Updates for EPMM to address CVE-2023-35081

August 8, 2023

Ivanti Releases Security Updates for EPMM to address CVE-2023-35081 Ivanti has identified and released patches for a directory traversal vulnerability(link is...

CISA

CISA: CISA Releases One Industrial Control Systems Advisory

August 8, 2023

CISA Releases One Industrial Control Systems Advisory CISA released one Industrial Control Systems (ICS) advisory on August 1, 2023. This...

CISA

CISA: CISA Releases Malware Analysis Reports on Barracuda Backdoors

August 8, 2023

CISA Releases Malware Analysis Reports on Barracuda Backdoors CISA has published three malware analysis reports on malware variants associated with...

CISA

CISA: CISA and International Partner NCSC-NO Release Joint Cybersecurity Advisory on Threat Actors Exploiting Ivanti EPMM Vulnerabilities

August 8, 2023

CISA and International Partner NCSC-NO Release Joint Cybersecurity Advisory on Threat Actors Exploiting Ivanti EPMM Vulnerabilities The Cybersecurity and Infrastructure...

CISA

CISA: CISA Releases Five Industrial Control Systems Advisories

August 8, 2023

CISA Releases Five Industrial Control Systems Advisories CISA released five Industrial Control Systems (ICS) advisories on August 3, 2023. These...

CISA

CISA: Mozilla Releases Security Updates for Multiple Products

August 8, 2023

Mozilla Releases Security Updates for Multiple Products Mozilla has released security updates to address vulnerabilities for Firefox 116, Firefox ESR...

CISA

CISA: CISA, NSA, FBI, and International Partners Release Joint CSA on Top Routinely Exploited Vulnerabilities of 2022

August 8, 2023

CISA, NSA, FBI, and International Partners Release Joint CSA on Top Routinely Exploited Vulnerabilities of 2022 The U.S. Cybersecurity and...

CISA

CISA: CISA Releases its Cybersecurity Strategic Plan

August 8, 2023

CISA Releases its Cybersecurity Strategic Plan Today, CISA released a strategic plan to lay out how we will fulfill our...

CISA

Month: August 2023

Mediatek products privilege escalation | CVE-2023-20786

Mediatek products privilege escalation | CVE-2023-20795

Mediatek Chipsets privilege escalation | CVE-2023-20808

Mediatek Chipsets information disclosure | CVE-2023-20818

Mediatek Chipsets information disclosure | CVE-2023-20810

Mediatek Chipsets privilege escalation | CVE-2023-20809

Mediatek products privilege escalation | CVE-2023-20783

Mediatek Chipsets privilege escalation | CVE-2023-20816

Mediatek Chipsets privilege escalation | CVE-2023-20807

Mediatek products privilege escalation | CVE-2023-20784

Mediatek products information disclosure | CVE-2023-20790

Mediatek products privilege escalation | CVE-2023-20787

CISA: CISA Adds One Known Exploited Vulnerability to Catalog

CISA: Ivanti Releases Security Updates for EPMM to address CVE-2023-35081

CISA: CISA Releases One Industrial Control Systems Advisory

CISA: CISA Releases Malware Analysis Reports on Barracuda Backdoors

CISA: CISA and International Partner NCSC-NO Release Joint Cybersecurity Advisory on Threat Actors Exploiting Ivanti EPMM Vulnerabilities

CISA: CISA Releases Five Industrial Control Systems Advisories

CISA: Mozilla Releases Security Updates for Multiple Products

CISA: CISA, NSA, FBI, and International Partners Release Joint CSA on Top Routinely Exploited Vulnerabilities of 2022

CISA: CISA Releases its Cybersecurity Strategic Plan

CISA: CISA Adds One Known Exploited Vulnerability to Catalog

NOESCAPE Ransomware Victim: Kreacta

NOESCAPE Ransomware Victim: Avertronics Inc

CISA: JCDC’s Industry-Government Collaboration Speeds Mitigation of CrowdStrike IT Outage

CISA: CISA Releases Three Industrial Control Systems Advisories

CISA: Fortinet Updates Guidance and Indicators of Compromise following FortiManager Vulnerability Exploitation

CISA: Foreign Threat Actor Conducting Large-Scale Spearphishing Campaign with RDP Attachments

CISA: CISA Releases Four Industrial Control Systems Advisories

You may have missed