Slándáil Research: Security Feeds

Feed: HongKong HKCERT

Xen Denial of Service Vulnerability

Palo Alto Products Remote Code Execution Vulnerability

Palo Alto Products Multiple Vulnerabilities

Node.js Remote Code Execution Vulnerability

Microsoft Monthly Security Update (April 2024)

Adobe Monthly Security Update (April 2024)

Ivanti Products Multiple Vulnerabilities

Apache Products Multiple Vulnerabilities

XZ Utils Vulnerability in Linux Distributions

Apple Product Remote Code Execution Vulnerability

[Security Blog] Defacement Attacks: Understanding and Prevention

Malware Alert - Increasing Malware Attacks Using Cloud Resources and Targeting Companies

Malware Alert - Increasing Trend of DarkGate Malware Attacks Exploiting Microsoft Windows SmartScreen's Critical Vulnerability

Adobe Monthly Security Update (March 2024)

Microsoft Monthly Security Update (March 2024)

ChromeOS Security Restriction Bypass Vulnerabilities

[Security Blog] Deepfake: Where Images Don't Always Speak Truth

Phishing Alert - Phishing Campaigns Targeting Users in Various Platforms on the Rise

[Security Blog] How To Protect Your Data in Quantum Age

Mozilla Thunderbird Information Disclosure Vulnerability

Microsoft Edge Remote Code Execution vulnerabilities

Cisco NX-OS Denial of Service vulnerabilities

F5 BIG-IP Security Restriction Bypass Vulnerability

Malware Alert - Public should beware of GoldDigger malware targeting iOS devices

ISC BIND Denial of Service Vulnerabilities

Microsoft Monthly Security Update (February 2024)

Adobe Monthly Security Update (February 2024)

Ivanti Products Security Restriction Bypass Vulnerability

Cisco ClamAV Denial of Service Vulnerability

Phishing Alert - Public should be vigilant against fraudulent video conference scam using AI Deepfake technology

TP-Link Router Remote Code Execution Vulnerabilities

Microsoft Edge Remote Code Execution Vulnerabilities

Jenkins Multiple Vulnerabilities

Citrix Hypervisor Denial of Service Vulnerability

VMware Aria Automation Security Restriction Bypass Vulnerability

Drupal Denial of Service Vulnerability

Cisco Unity Connection Remote Code Execution Vulnerability

Microsoft Monthly Security Update (January 2024)

Adobe Monthly Security Update (January 2024)

F5 BIG-IP Denial of Service Vulnerability

ESET Products Security Restriction Bypass Execution Vulnerability

Apple Product Information Disclosure Vulnerability

OpenSSL Security Restriction Bypass Vulnerability

OpenSSH Security Restriction Bypass Vulnerability

Zimbra Multiple Vulnerabilities

Microsoft Monthly Security Update (December 2023)

Adobe Monthly Security Update (December 2023)

[Security Blog] Taking Security Best Practice During Festive Season

ChromeOS Security Restriction Bypass Vulnerability

IBM WebSphere Products Multiple Vulnerabilities

Google Chrome Remote Code Execution Vulnerabilities

SAP Products Multiple Vulnerabilities

Microsoft Monthly Security Update (November 2023)

Adobe Monthly Security Update (November 2023)

OpenVPN Multiple Vulnerabilities

NetApp Denial of Service Vulnerability

[Security Blog] Raise Public Awareness of Cyber Security: Guard against Risks of Unknown WhatsApp Video Calls

[Security Blog] Protecting Critical Infrastructures: IT/OT Convergence vs MITM Attacks

F5 BIG-IP Remote Code Execution Vulnerability

IBM WebSphere Application Server Security Restriction Bypass Vulnerability

VMware Aria Operations for Logs Multiple Vulnerabilities

Sophos Firewall Sensitive Information Disclosure Vulnerability

Cisco IOS XE Escalation of Privilege Vulnerability

Microsoft Monthly Security Update (October 2023)

Adobe Monthly Security Update (October 2023)

Exim Multiple Vulnerabilities

Palo Alto Products Denial of Service Vulnerability

[Security Blog] Ransomware Trends Q2 2023: Surge in Attacks Across Asia-Pacific, Persistent Multiple Extortion, and Evolving Threat Landscape

GitLab Security Restriction Bypass Vulnerability

Mozilla Products Remote Code Execution Vulnerability

Microsoft Monthly Security Update (September 2023)

Adobe Monthly Security Update (September 2023)

Notepad++ Multiple Vulnerabilities

Memcached Denial of Service Vulnerability

Juniper Junos OS Data Manipulation Vulnerability

IBM MQ Multiple Vulnerabilities

Xen Information Disclosure Vulnerability

[Security Blog] HKCERT Alerts the Public on Preventive Measures Against WhatsApp Account Theft

Cisco ClamAV Multiple Vulnerabilities

[Security Blog] Comprehensive Guide to Social Media Scams: Setting up Defense to Safeguard Your Personal Information

[Security Blog] Introducing the New HKCERT “All-Out Anti-Phishing” Thematic Page

Python Remote Code Execution Vulnerability

Microsoft Monthly Security Update (August 2023)

F5 BIG-IP Information Disclosure Vulnerability

Adobe Monthly Security Update (August 2023)

PaperCut Multiple Vulnerabilities

OpenSSH Remote Code Execution Vulnerability

Adobe ColdFusion Multiple Vulnerabilities

Adobe ColdFusion Remote Code Execution Vulnerability

SonicWall Products Multiple Vulnerabilities

Ghostscript Remote Code Execution Vulnerability

Microsoft Monthly Security Update (July 2023)

Adobe Monthly Security Update (July 2023)

Apple Products Remote Code Execution Vulnerability

[Security Blog] Web 3.0 Cyber Security New Horizons: Strategies and Practices for Addressing Digital Age Challenges

VMware vCenter Server Multiple Vulnerabilities

ASUS Router Multiple Vulnerabilities

Microsoft Monthly Security Update (June 2023)

Adobe Monthly Security Update (June 2023)

VMWare Aria Operations for Networks Multiple Vulnerabilities

Cisco AnyConnect Elevation of Privilege Vulnerability

ManageEngine Password Manager Pro Multiple Vulnerabilities

[Security Blog] IoT Security in the Digital Age: Protecting Your Connected World

GitLab Information Disclosure Vulnerabilities

Apache Tomcat Multiple Vulnerabilities

WordPress Multiple Vulnerabilities

[Security Blog] Unmasking Cybercrime-as-a-Service: The Dark Side of Digital Convenience

Microsoft Monthly Security Update (May 2023)

Adobe Monthly Security Update (May 2023)

Samsung Products Multiple Vulnerabilities

IBM WebSphere Application Server Information Disclosure Vulnerability

NetApp Product Denial of Service Vulnerability

TP-Link Router Remote Code Execution Vulnerability

Microsoft Monthly Security Update (April 2023)

Adobe Monthly Security Update (April 2023)

Apple Products Remote Code Execution Vulnerabilities

Cisco Webex Meetings Web UI Vulnerabilities

Apple Xcode Multiple Vulnerabilities

Microsoft Windows Snipping Tool Information Disclosure Vulnerability

Aruba Products Data Manipulation Vulnerability

Mozilla Thunderbird Denial of Service Vulnerability

[Security Blog] Do you know what is Identity/Credential Theft?

OpenSSL Denial of Service Vulnerability

Veeam Backup & Replication Information Disclosure Vulnerability

Samsung Chipset Remote Code Execution Vulnerability

Microsoft Monthly Security Update (March 2023)

Adobe Monthly Security Update (March 2023)

ChromeOS Remote Code Execution Vulnerability

Trusted Platform Module (TPM) Multiple Vulnerabilities

Mozilla Firefox Remote Code Execution Vulnerability

[Security Blog] HKCERT Security Tips: Beware of Fake ChatGPT Apps and Phishing Websites

Apache Tomcat Denial of Service Vulnerability

Node.js Multiple Vulnerabilities

[Security Blog] Verify from Various Sources to Ensure Security When Searching for Answers with AI

Splunk Products Multiple Vulnerabilities

Git Multiple Vulnerabilities

Microsoft Monthly Security Update (February 2023)

Adobe Monthly Security Update (February 2023)

OpenSSH Multiple Vulnerabilities

[Security Blog] How to Mitigate New Cyber Security Risks Arising from the Growing Use of Technology in Industrial Operations

IBM WebSphere Application Server Remote Code Execution Vulnerability

ISC BIND Multiple Vulnerabilities

QNAP NAS Remote Code Execution Vulnerability

VMWare vRealize Log Insight Multiple Vulnerabilities

GitLab Remote Code Execution Vulnerabilities

[Security Blog] Upgrade Your End-of-Support Windows Products as Soon as Possible

[Security Blog] Upgrade Your End-of-Support Microsoft Products as Soon as Possible

Cisco End-of-Life Small Business Routers Multiple Vulnerabilities

Microsoft Monthly Security Update (January 2023)

Adobe Monthly Security Update (January 2023)

[Security Blog] Analysing AgentTesla Spyware

Juniper Junos OS Denial of Service Vulnerability

NetApp OnCommand Insight Security Bypass Vulnerability

[Security Blog] Beware of Phishing Campaigns During Festive Season

Microsoft Monthly Security Update (December 2022)

Citrix Products Remote Code Execution Vulnerability

Adobe Monthly Security Update (December 2022)

Fortinet FortiOS Remote Code Execution Vulnerability

Mozilla Thunderbird Security Restriction Bypass Vulnerability

F5 Products Data Manipulation Vulnerability

[Security Blog] Always Keep System Security Up-to-Date to Prevent Customer Data from Becoming Phishing Feeds

Samba Denial of Service Vulnerability

Microsoft Monthly Security Update (November 2022)

Citrix Products Multiple Vulnerabilities

IBM MQ Denial of Service Vulnerability

Microsoft Edge Data Manipulation Vulnerability

VMware NSX-V Multiple Vulnerabilities

Google Chrome Data Manipulation Vulnerability

SQLite Denial of Service Vulnerability

LibreOffice Remote Code Execution Vulnerability

Apache Commons Text Remote Code Execution Vulnerabilities

Palo Alto PAN-OS Security Restriction Bypass Vulnerability

Aruba Products Multiple Vulnerabilities

Microsoft Monthly Security Update (October 2022)

Adobe Monthly Security Update (October 2022)

Aruba Product Multiple Vulnerabilities

IBM WebSphere Application Server Denial of Service Vulnerability

Microsoft Exchange Zero-day Remote Code Execution Vulnerability

Microsoft Exchange Zero-day Remote Code Execution Vulnerabilities

WhatsApp Multiple Vulnerabilities

[Security Blog] Browser’s Anti-phishing feature: What is it and how it helps to block phishing attack?

Trend Micro Apex One Multiple Vulnerabilities

Microsoft Monthly Security Update (September 2022)

Adobe Monthly Security Update (September 2022)

Cisco Webex Meetings App Data Manipulation Vulnerability

Google Chrome Security Restriction Bypass Vulnerability

[Security Blog] Adopt Good Cyber Security Practices to Make AI Your Friends not Foes

VMware Tools Escalation of Privilege Vulnerability

GitLab Remote Code Execution Vulnerability

Microsoft Edge Security Restriction Bypass Vulnerability

QNAP NAS Multiple Vulnerabilities

Palo Alto PAN-OS Denial Of Service Vulnerability

RedHat Linux Kernel Multiple Vulnerabilities

Microsoft Monthly Security Update (August 2022)

Citrix Products Elevation of Privilege Vulnerability

Adobe Monthly Security Update (August 2022)

[Security Blog] HKCERT Publishes Incident Response Guideline for SMEs to Enhance Information Security Incident Handling Competence

Apache HTTP Server Multiple Vulnerabilities

Mozilla Thunderbird Multiple Vulnerabilities

[Security Blog] Email Account Theft to Bypass MFA Protection

LibreOffice Multiple Vulnerabilities

Samba Multiple Vulnerabilities

[Security Blog] Incident Response Guideline for SMEs

Cisco Small Business Routers Multiple Vulnerabilities

[Security Blog] HKCERT and Cybersec Infohub Fully Support Open Threat Intelligence Campaign

ChromeOS Multiple Vulnerabilities

Juniper Junos OS Multiple Vulnerabilities

VMWare Products Security Restriction Bypass Vulnerability

Microsoft Monthly Security Update (July 2022)

Adobe Monthly Security Update (July 2022)

Cisco Product Information Disclosure Vulnerability

Citrix Hypervisor Multiple Vulnerabilities

[Security Blog] An Analysis of Microsoft Support Diagnostic Tool Vulnerability-Led QBot Phishing Email Attack

Cisco Small Business Routers Denial Of Service Vulnerability

Microsoft Monthly Security Update (June 2022)

Zoom Products Multiple Vulnerabilities

Adobe Monthly Security Update (June 2022)

Drupal Core Multiple Vulnerabilities

[Security Blog] Malicious Information Gathering - Now I See You

[Security Blog] Information Security Utopia Starts with Zero Trust Architecture

NetApp Products Multiple Vulnerabilities

Microsoft Products Remote Code Execution Vulnerability

Zoom Client for Meetings Remote Code Execution Vulnerability

Drupal Information Disclosure Vulnerability

Citrix Products Denial of Service Vulnerabilities

Cisco IOS XR Security Restriction Bypass Vulnerability

ISC BIND Denial Of Service Vulnerability

Apache Tomcat Information Dislosure Vulnerability

Apache Tomcat Information Disclosure Vulnerability

Ubuntu Linux Kernel Multiple Vulnerabilities

Microsoft Monthly Security Update (May 2022)

Adobe Monthly Security Update (May 2022)

Google Chrome for Android Multiple Vulnerabilities

Fortinet Products Multiple Vulnerabilities

OpenSSL Multiple Vulnerabilities

Debian Linux Kernel Multiple Vulnerabilities

Synology Products Multiple Vulnerabilities

QNAP NAS Remote Code Execution Vulnerabilities

Drupal Multiple Vulnerabilities

Cisco Product Data Manipulation Vulnerability

F5 Products Multiple Vulnerabilities

Oracle Products Multiple Vulnerabilities

Apache Struts Remote Code Execution Vulnerability

SUSE Linux Kernel Multiple Vulnerabilities

Microsoft Monthly Security Update (April 2022)

Adobe Monthly Security Update (April 2022)

Nginx ldap-auth Remote Code Execution Vulnerability

IBM WebSphere Application Server Multiple Vulnerabilities

Cisco Products Multiple Vulnerabilities

VMWare Products Multiple Vulnerabilities