6 min read

[Security Tip] December Security Threats Summarized

By Prime Care Tech Security Team on Mon, Jan 10, 2022 @ 10:59 AM

Each week our security team tracks threats, vulnerabilities, and patches announced by leading IT experts and vendors to ensure we prioritize and address them for our managed IT services clients. Below you'll find our monthly recap of all events. If you're not a client, make sure your team knows about these security events, as well as future ones. 

Get Updates


High Impact

Company/Source Product Type
Apache Log4j New release (v2.15.0) for critical RCE vulnerability under exploitation

Note: While our apps do not use, we continue to review our systems and assist primeCLOUD clients with other/impacted apps.
Zoho ManageEngine Desktop Central & Desktop Central MSP Security advisory


Medium Impact

Company/Source Product Type
Google Chrome Security updates
Microsoft Multiple Security updates
VMware n/a Security update

 

Low Impact

Company/Source Product Type
Apple Multiple Security update
Mozilla Firefox, Firefox ESR, and Thunderbird Security updates

 

No Impact to Our Clients/FYI

Company/Source Product Type
Adobe Multiple Security updates
Apache HTTP Server Server-side request forgery (SSRF) - CVE-2021-40438
CISA Hillrom Welch Allyn Cardiology Products Security advisory
CISA WebHMI Security advisory of vulnerabilities
CISA/FBI Zoho ManagedEngine ServiceDesk Plus Alert on active exploitation - CVE-2021-44077
CISA/NSA 5G Cloud Infrastructures Guidance on securing
ManageEngine ADSelfService Plus APT exploitation
MikroTik RouterOS Directory traversal vulnerability - CVE-2018-14847
Mozilla Network Security Services Security updates
Qualcomm Multiple Chipsets Improper input validation vulnerability - CVE-2020-11261
SAP Multiple Security updates (Dec)
SonicWall SMA 100 Series Appliances Security advisory
Zoho ManagedEngine ServiceDesk Authentication bypass vulnerability - CVE-2021-37415
Zoho ManagedEngine ServiceDesk Plus Remote code execution - CVE-2021-44077

 

If you're not confident your organization is on top of weekly security threats, vulnerabilities, and patches, it's time to conduct a cyber security audit. Or better, get in touch so we can walk you through critical items for your security checklist.

Conduct Self-Audit Now

Topics: primeCLOUD cyber security security vulnerabilities cyber criminals security patches security threats
1 min read

[Press] Worker data under threat: Another concern for providers

By Prime Care Tech Marketing on Fri, Dec 10, 2021 @ 03:08 PM

In this week's McKnight's Long-Term Care News, a warning was issued about Worker data under threat: Another concern for providers desperate for staff.

With many providers using third-party staffing agencies, the article reiterated our warning to clients. "Prime Care Technologies, an IT firm that offers cybersecurity services to long-term care clients, reported earlier this year that some two-thirds of breaches are now vendor-related."

Ongoing and growing cyber threats to your data may prompt conversations around outsourcing cybersecurity protections and considering cyber insurance policies. Following are additional resources to help you weigh these decisions:

We're here to help!

KEEP ME UPDATED

Let's Talk

Topics: primeCLOUD cyber security press mention
6 min read

[Security Tip] November Security Threats Summarized

By Prime Care Tech Security Team on Thu, Dec 02, 2021 @ 12:51 PM

Each week our security team tracks threats, vulnerabilities, and patches announced by leading IT experts and vendors to ensure we prioritize and address them for our managed IT services clients. If you're not a client, make sure your team knows about these security events from November 2021, as well as future ones.

Subscribe Yourself or Colleague


High Impact

Source Product Type
Citrix n/a Security updates

 

Medium Impact

Source Product Type
VMware n/a Security advisory

 

Low Impact

Source

Product

Type

Apple

iCloud for Windows 13

Security updates

CISA

n/a

Security Advisory - Iranian Government-Sponsored APT Cyber Actors Exploiting Microsoft Exchange and Fortinet Vulnerabilities

Cisco

Multiple

Security updates for vulnerabilities

Google

Chrome

Security updates

Mozilla

Firefox, Firefox ESR

Security updates

Samba

n/a

Security updates

 

No Impact to Our Clients/FYI

Source

Product

Type

CISA

n/a

Security Advisory - Multiple Data Distribution Service Implementations

CISA

n/a

Security Advisory - Siemens Nucleus Real-Time OS

Drupal

n/a

Multiple security updates

ManageEngine

ADSelfService Plus

Security researchers alert of active targeting

Palo Alto Networks

PAN-OS

Security updates

SAP

Multiple

Security updates (Nov 2021)

VMware

Tanzu Application Service for VMs

Security update

 

If you're not confident that your organization is on top of weekly security threats, vulnerabilities, and patches, it's time to conduct a cyber security audit.

Conduct Self-Audit Now

Or better, get in touch so we can walk you through the critical items for your security checklist.

 
Topics: primeCLOUD cyber security security vulnerabilities cyber criminals security patches security threats
10 min read

[Security Tip] October's Security Threats Summarized

By Prime Care Tech Security Team on Fri, Oct 29, 2021 @ 02:51 PM

Each week our security team tracks threats, vulnerabilities, and patches announced by leading IT experts and vendors to ensure we prioritize and address them for our managed IT services clients. If you're not a client, make sure your team knows about these security events from October 2021, as well as future ones.

Subscribe Yourself or Colleague


High Impact

Source Product Type
AMD Ryzen Chipset Driver Patches for security vulnerabilities
Microsoft NTLM Relay Mitigation advice for PetitPotam attacks 
ManageEngine ADManager Plus Security fix for critical vulnerability
VMware n/a Security update

 

Medium Impact

Source Product Type
FBI n/a Indicators of compromise associated with Hive ransomware
Google Chrome Security updates
Intel Multiple Multiple security updates
Microsoft Multiple Mitigation advice and workarounds for zero-day threat CVE-2021-40444

 

Low Impact

Source Product Type
Atlassian Confluence Server and Data Center Security updates
ManageEngine ServiceDesk Plus Update for remote code execution (RCE) and server-side request forgery (SSRF) vulnerabilities
Microsoft Multiple Security updates (Aug 2021)
Microsoft Multiple Security updates (Sep 2021)
Mozilla Firefox, Firefox ESR, and Thunderbird  Security updates
Pulse Secure Secure Connect Security update
Cisco Multiple Security Updates
Mozilla Firefox, Firefox ESR Security updates
Adobe Multiple Security Updates 
Apple Multiple Security Update to Address CVE-2021-30883
Microsoft Multiple Security Updates (October 2021)
Google Chrome  v95.0.4638.54 for Windows, Mac, and Linux

 

No Impact

Source Product Type
Apple iOS and iPadOS 14.8 Security updates
Citrix ShareFile Storage Zones Controller Security update
Drupal n/a Multiple security updates
FBI-CISA-CGCYBER ManageEngine ADSelfService Plus Advisory on advanced persistent threat (APT) exploitation of vulnerability
Fortinet FortiManager SD-WAN Orchestrator Patch for improper access control vulnerability
Microsoft Azure Linux Open Mgt Infrastructure Security update
SAP Multiple Security updates (Sep 2021)
WordPress WordPress Security update
CISA/NSA Multiple Guidance on Selecting and Hardening VPNs
Apache HTTP Servers Security update
Apache Server Address vulnerabilities under exploitation
CISA Multiple Security Advisory Honeywell Experion and ACE Controllers
CISA n/a Advisory remote users
Juniper Networks Multiple Security Updates
NSA Multiple Guidance on Avoiding the Dangers of Wildcard TLS Certificates and ALPACA Techniques
U.S. Water and Wastewater Systems Sector Facilities Ongoing Cyber Threats
Apache Tomcat (multiple versions) Security advisory to address vulnerability
Cisco IOS XE SD-WAN Software Security updates to address vulnerability
GPSD  v3.20 (Dec 31, 2019) through v3.22 (Jan 8, 2021) GPS Daemon (GPSD) bug
Oracle Multiple Critical patch update (October 2021) to address vulnerabilities 

 

If you're not confident that your organization is on top of weekly security threats, vulnerabilities, and patches, it's time to conduct a cyber security audit.

Conduct Self-Audit Now

Or better, get in touch so we can walk you through the critical items for your security checklist.

Topics: primeCLOUD cyber security security vulnerabilities cyber criminals security patches security threats
3 min read

[Security Tip] Weekly Threats, Vulnerabilities, Patches - Oct 24, 2021

By Prime Care Tech Security Team on Mon, Oct 25, 2021 @ 05:53 PM

Does your IT team track reported security threats, vulnerabilities, and patches as often as weekly? We do. In fact, our primeCLOUD customers receive notifications about the impact each week, along with an explanation of how our team is mitigating risk on their behalf. Review last week's summary to understand the potential impacts and interventions. 

Effective Week Ending October 24, 2021

High Impact

No new impacts since Oct 3, 2021 report.

 

Medium Impact

No new impacts since September 19, 2021 report.

 

Low Impact

Source

Product(s)

Type

Google Chrome v95.0.4638.54 for Windows, Mac, and Linux

 

No Impact

*Prime Care Tech team assessed and determined our clients are not impacted/using product

Source

Product(s)

Type

Apache Tomcat (multiple versions) Security advisory to address vulnerability
Cisco IOS XE SD-WAN Software Security updates to address vulnerability
Oracle Multiple Critical patch update (October 2021) to address vulnerabilities 
CISA  GPSD v3.20 (Dec 31, 2019) through v3.22 (Jan 8, 2021) GPS (GPSD) Daemon bug alert

 

The constantly increasing demands of securing your data against cyber criminals make it challenging to keep up. If you need help staying on top of your game, get in touch.

What's an IT Assessment?

Perhaps someone from your organization could also benefit from these security alerts?

Subscribe a Colleague

Topics: primeCLOUD cyber security security vulnerabilities cyber criminals security patches security threats

Featured

Posts by Tag

See all