Prime Care Tech Office of Compliance


Recent posts by Prime Care Tech Office of Compliance

7 min read

[Security Tip] Track Threats, Vulnerabilities, and Patches Weekly

By Prime Care Tech Office of Compliance on Mon, Sep 27, 2021 @ 11:50 AM

Does your IT team track reported security threats, vulnerabilities, and patches as often as weekly? We do. In fact, our primeCLOUD customers receive notifications about the impact each week, along with an explanation of how our team is mitigating risk on their behalf. Review last week's summary to understand the potential impacts and interventions. 

Effective Week Ending September 19, 2021

High Impact

Source

Product(s)

Type

Microsoft

NTLM Relay

Mitigation advice for PetitPotam attacks 

AMD Ryzen

Chipset Driver

Patches for security vulnerabilities

 

Medium Impact

Source

Product(s)

Type

Intel

Multiple

Multiple security updates

FBI

n/a

Indicators of compromise associated with Hive ransomware

Google

Chrome

Security updates

Microsoft

Multiple

Mitigation advice and workarounds for zero-day threat CVE-2021-40444

 

Low Impact

Source

Product(s)

Type

ManageEngine

ServiceDesk Plus

Update for remote code execution (RCE) and server-side request forgery (SSRF) vulnerabilities

Pulse Secure

Secure Connect

Security update

 

NOTE: Remediation depends entirely on third-party, sole-source software supplier (Verizon Enterprise Solutions) and new hardware deployment (est. mid-October)

Microsoft

Multiple

Security updates (Aug 2021)

Atlassian

Confluence Server and Data Center

Security updates

Mozilla

Firefox, Firefox ESR, and Thunderbird 

Security updates

Microsoft

Multiple

Security updates (Sep 2021)

 

No Impact

*Prime Care Tech team assessed and determined our clients are not impacted/using product

Source

Product(s)

Type

WordPress

WordPress

Security update

Fortinet

FortiManager
SD-WAN Orchestrator

Patch for improper access control vulnerability

Apple

iOS and iPadOS 14.8

Security updates

SAP

Multiple

Security updates (Sep 2021)

Citrix

ShareFile Storage Zones Controller

Security update

Drupal

n/a

Multiple security updates

Microsoft

Azure Linux Open Mgt Infrastructure

Security update

FBI-CISA-CGCYBER

ManageEngine
ADSelfService Plus

Advisory on advanced persistent threat (APT) exploitation of vulnerability

 

The constantly increasing demands of securing your data against cyber criminals make it challenging to keep up. If you need help staying on top of your game, get in touch.

What's an IT Assessment?

Perhaps someone from your organization could also benefit from these security alerts?

Subscribe a Colleague

Topics: cyber security security vulnerabilities cyber criminals security patches security threats

Featured

Posts by Tag

See all