Samba Releases Security Updates - Updated September 21, 2020
September 21, 2020
H2OSecCon 2025- a virtual security event for the water sector - happening May 20th. Register Now!
Cybersecurity
CISA Strongly Recommends Patching Critical Vulnerability in Microsoft Windows Netlogon Remote Protocol
The U.S. Department of Homeland Security Cybersecurity and Infrastructure Security Agency (CISA) has released Emergency Directive (ED) 20-04 addressing a critical vulnerability – CVE-2020-1472 – affecting Microsoft Windows Netlogon Remote Protocol. ED 20-04 applies to federal government departments and agencies, requiring that they apply updates and report completion to CISA by Wednesday, September 23.
Drupal Releases Security Updates – Updated September 17, 2020
September 17, 2020
Drupal has released security updates to address vulnerabilities in Drupal 7.x, 8.8.x, 8.9.x, and 9.0.x. An attacker could exploit some of these vulnerabilities to obtain sensitive information or leverage the way HTML is rendered. CISA encourages users and administrators to review the following Drupal security updates and apply the necessary updates. Read the advisory at CISA.
FERC and NERC Publish Cyber Planning for Response and Recovery Study (CYPRES) Report
The Federal Energy Regulatory Commission (FERC) and the North American Electricity Reliability Corporation (NERC) published a report this week on cyber planning for response and recovery that outlines best practices for the electric utility industry. The report includes observations on defensive capabilities and effectiveness of Incident Response and Recovery (IRR) plans. The report identifies common elements among the IRR plans and best practices of effective IRR plans.
FBI FLASH: Intrusion Activities of China-based Cyber Actors Associated with APT 41
The FBI has published a (TLP:WHITE) FLASH message providing technical details of cyber actors based in China, associated with APT 41, who have been indicted for computer intrusions affecting more than 100 victim companies in the U.S. and abroad. Some of the targeted victims were in the “government” industry. The FLASH describes how the actors used a wide range of tactics to gain initial access, including spear-phishing and by exploiting publicly identified security vulnerabilities, including those involving VPNs.
CISA 3rd Annual National Cybersecurity Summit – Day One
Yesterday, the U.S. Department of Homeland Security's (DHS's) Cybersecurity and Infrastructure Security Agency (CISA) kicked off its 3rd Annual National Cybersecurity Summit 2020 with Day One: Key Cyber Insights. CISA Director, Christopher Krebs (mullet and all) delivered the keynote.
Advtantech WebAccess Node (ICSA-20-261-01)
CISA has published an advisory on an incorrect permission assignment for critical resource vulnerability in Advtantech WebAccess Node. All versions prior to 9.0.1 are affected. Successful exploitation of this vulnerability could allow an attacker to escalate their privileges. Advantech has released update 9.0.1 to mitigate this vulnerability. CISA also recommends a series of measures to mitigate the vulnerability. Read the advisory at CISA.
Vulnerability Management – Considerations in OT/ICS Vulnerability Assessments
Identifying and remediating vulnerabilities are paramount to a successful cybersecurity strategy. While vulnerability disclosures, CVEs, and CVSS scores are a good place to start when addressing security gaps, neither offers a complete picture or effective assessment for OT/ICS environments. After ten years of vulnerability assessments, industrial cybersecurity firm Verve has observed several common gaps and offers their top five considerations every OT/ICS environment can benefit from understanding.
ENTTEC Lighting Controllers (Update A) (ICSA-20-177-01)
September 15, 2020
CISA has updated this advisory with additional details on the affected products and mitigation measures. Access the advisory at CISA.
June 25, 2020
CISA Alert: Iran-based Threat Actor Exploits VPN Vulnerabilities
The U.S. Department of Homeland Security Cybersecurity and Infrastructure Security Agency (CISA) has published a new alert about an Iran-based malicious cyber actor targeting several U.S. federal agencies and other U.S.-based networks. CISA developed the alert with contributions from the FBI.
Pages
