Cisco Releases Security Updates for Multiple Products 25 Sep 2020, 1:19 pm

Cisco has released security updates to address vulnerabilities in multiple products. A remote attacker could exploit some of these vulnerabilities to take control of an affected system.

The Cybersecurity and Infrastructure Security Agency (CISA) encourages users and administrators to review the Cisco security page and apply the necessary updates.

Apple Releases Security Updates 25 Sep 2020, 1:17 pm

Apple has released security updates to address vulnerabilities in multiple products. An attacker could exploit some of these vulnerabilities to take control of an affected system.

The Cybersecurity and Infrastructure Security Agency (CISA) encourages users and administrators to review the Apple security pages for the following products and apply the necessary updates:

• iCloud for Windows 7.21
• iCloud for Windows 11.4
• macOS Catalina 10.15.7, Security Update 2020-005 High Sierra, Security Update 2020-005 Mojave

Unpatched Domain Controllers Remain Vulnerable to Netlogon Vulnerability, CVE-2020-1472 24 Sep 2020, 2:25 pm

The Cybersecurity and Infrastructure Security Agency (CISA) is aware of active exploitation of CVE-2020-1472, an elevation of privilege vulnerability in Microsoft’s Netlogon. A remote attacker can exploit this vulnerability to breach unpatched Active Directory domain controllers and obtain domain administrator access. Applying patches from Microsoft’s August 2020 Security Advisory for CVE-2020-1472 can prevent exploitation of this vulnerability.

CISA has released a patch validation script to detect unpatched Microsoft domain controllers. CISA urges administrators to patch all domain controllers immediately—until every domain controller is updated, the entire infrastructure remains vulnerable. Review the following resources for more information:

• CISA Patch Validation Script
• CISA Emergency Directive 20-04: Mitigate Netlogon Elevation of Privilege Vulnerability from August 2020 Patch Tuesday
• CERT/CC Vulnerability Note VU#490028
• Microsoft Security Vulnerability Information for CVE-2020-1472
• Microsoft’s guidance on How to manage the changes in Netlogon secure channel connections associated with CVE-2020-1472

Mozilla Releases Security Updates for Firefox and Firefox ESR 22 Sep 2020, 7:35 pm

Mozilla has released security updates to address vulnerabilities in Firefox and Firefox ESR. An attacker could exploit some of these vulnerabilities to take control of an affected system.

The Cybersecurity and Infrastructure Security Agency (CISA) encourages users and administrators to review the Mozilla Security Advisories for Firefox 81 and Firefox ESR 78.3 and apply the necessary updates.

Google Releases Security Updates for Chrome 22 Sep 2020, 1:47 pm

Google has updated the stable channel for Chrome to 85.0.4183.121 for Windows, Mac, and Linux. This version addresses vulnerabilities that an attacker could exploit to take control of an affected system.

The Cybersecurity and Infrastructure Security Agency (CISA) encourages users and administrators to review the stable channel update and apply the necessary changes.

Samba Releases Security Update for CVE-2020-1472 21 Sep 2020, 7:12 pm

The Samba Team has released a security update to address a critical vulnerability—CVE-2020-1472—in multiple versions of Samba. This vulnerability could allow a remote attacker to take control of an affected system.

The Cybersecurity and Infrastructure Security Agency (CISA) encourages users and administrators to review the Samba Security Announcement for CVE-2020-1472 and apply the necessary updates or workaround.

CISA Releases Emergency Directive on Microsoft Windows Netlogon Remote Protocol 19 Sep 2020, 1:48 am

The Cybersecurity and Infrastructure Security Agency (CISA) has released Emergency Directive (ED) 20-04 addressing a critical vulnerability— CVE-2020-1472—affecting Microsoft Windows Netlogon Remote Protocol. An unauthenticated attacker with network access to a domain controller could exploit this vulnerability to compromise all Active Directory identity services.

Earlier this month, exploit code for this vulnerability was publicly released. Given the nature of the exploit and documented adversary behavior, CISA assumes active exploitation of this vulnerability is occurring in the wild.

ED 20-04 applies to Executive Branch departments and agencies; however, CISA strongly recommends state and local governments, the private sector, and others patch this critical vulnerability as soon as possible. Review the following resources for more information:

• CISA Emergency Directive 20-04: Mitigate Netlogon Elevation of Privilege Vulnerability from August 2020 Patch Tuesday
• CERT/CC Vulnerability Note [VU#490028]
• Microsoft Security Vulnerability Information for CVE-2020-1472
• Microsoft’s guidance on How to manage the changes in Netlogon secure channel connections associated with CVE-2020-1472

CERT/CC Releases Information on Critical Vulnerability in Microsoft Windows Netlogon Remote Protocol 17 Sep 2020, 2:12 pm

The CERT Coordination Center (CERT/CC) has released information on CVE-2020-1472, a vulnerability affecting Microsoft Windows Netlogon Remote Protocol. An unauthenticated attacker could exploit this vulnerability to obtain Active Directory domain administrator access. Although Microsoft provided patches for CVE-2020-1472 in August 2020, unpatched systems will be an attractive target for malicious actors.

The Cybersecurity and Infrastructure Security Agency (CISA), encourages users and administrators to review the following resources and apply the necessary updates and workaround.

• CERT/CC Vulnerability Note VU#490028
• Microsoft’s Security Advisory for CVE-2020-1472
• Microsoft’s guidance on How to manage the changes in Netlogon secure channel connections associated with CVE-2020-1472

Drupal Releases Security Updates 17 Sep 2020, 2:10 pm

Drupal has released security updates to address vulnerabilities in Drupal 7.x, 8.8.x, 8.9.x, and 9.0.x. An attacker could exploit some of these vulnerabilities to obtain sensitive information or leverage the way HTML is rendered.

The Cybersecurity and Infrastructure Security Agency (CISA) encourages users and administrators to review the following Drupal security updates and apply the necessary updates:

• SA-CORE-2020-007
• SA-CORE-2020-008
• SA-CORE-2020-009
• SA-CORE-2020-010
• SA-CORE-2020-011

Apple Releases Security Updates 17 Sep 2020, 2:06 pm

Apple has released security updates to address vulnerabilities in multiple products. An attacker could exploit some of these vulnerabilities to take control of an affected system.

The Cybersecurity and Infrastructure Security Agency (CISA) encourages users and administrators to review the Apple security pages for the following products and apply the necessary updates:

• Safari 14.0
• tvOS 14.0
• watchOS 7.0
• iOS 14.0 and iPadOS 14.0
• Xcode 12.0