Cyber Security Vulnerability and Patch Report

Cyber Security Vulnerability and Patch Report, December 3, 2017

Cyber Security Vulnerability and Patch Report

 

From our friends at

 Citadel Information Group

 

Cybersecurity Vulnerability and Patch Report

 

Important Security Updates

Apple macOS: Apple has released an update to macOS High Sierra. Apply the update. Details are available on Apple’s website. Special note regarding the Apple update on KrebsonSecurity.

Comodo Free Firewall: Comodo has released version 10.0.2.6420 of its free firewall and antivirus. Updates are available from Comodo’s website.

Mozilla Firefox: Mozilla has released version 57.0.1. Updates are available within the browser or from Mozilla’s website.

Spotify: Spotify has released version 1.0.68.407. Updates are available on Spotify’s website.

Viber: Viber has released version 7.6.0.1 for Windows. Updates are available on Viber’s website.

WinZip: Winzip has released version 22.0.12684. Updates are available from within the program, look for “Check for Updates” on the Help menu, or download from the WinZip website.

Current Software Versions

Adobe Flash Player 27.0.0.187

Adobe Reader DC 2018.009.20044

Dropbox 39.4.49 [Citadel warns against relying on security of Dropbox or other cloud-based file exchange systems. We recommend files containing sensitive information be independently encrypted with a program like Axcrypt; encryption keys be at least 15 characters long; and the master Dropbox [or other] password be at least 15 characters long and different from other passwords.]

Firefox 57.0.1 [Windows]

Google Chrome 62.0.3202.94

Internet Explorer 11.0.47

Java SE 8 Update 151 [Citadel recommends removing or disabling Java from your browser. Java is a major source of cyber criminal exploits. It is not needed for most internet browsing. If you have a particular web site that requires Java, Citadel recommends using a two-browser approach to minimize risk. If you normally browse the Web with Firefox, for example, disable the Java plugin in Firefox and use an alternative browser — such as Chrome, IE9, Safari, etc — with Java enabled to browse only the sites that require it.]

Microsoft Edge 41.16299.15.0

QuickTime 7.7.9 [Citadel recommends removing QuickTime. On April 14, 2016 US-CERT advised Microsoft Windows users to remove QuickTime. This followed a report in ars technica that Apple has no plans to update the Windows app despite at least two reliable QuickTime vulnerabilities that threaten Windows users who still have the program installed.]

Safari 11.0 [Mac OS X Mavericks, Yosemite, El Capitan]

Skype 7.40.0.104

For Your IT Department

Cisco Multiple Products: Cisco has released updates to address vulnerabilities in WebEx Recording Format and Advanced Recording Format Players, Data Center Network Manager, WebEx Meeting Center, WebEx Event Center, WebEx Meeting Server, USC Central Software, Multilayer Director, Nexus 7000 Series, Nexus 7700 Series, Prime Service Catalog, NX-OS System Software, Jabber, IP Phone 8800, IOS XR Software, FXOS and NX-OS System Software, Email Security Appliance, Unified Communications Manager, Meeting Server, Application Policy Infrastructure Controller, Secure Access Control System, Wi-Fi Protected Access and Protected Access II, Unified Computing System Manager and Firepower 9000, and others. Apply updates. Additional details are available on Cisco’s website.

McAfee: McAfee has released updates to fix several vulnerabilities in its Web Gateway. Apply updates. Additional details are available on McAfee’s website.

WordPress: WordPress has released version 4.9.1. Apply updates. Additional details are available on WordPress’ website.

*******************

If you are responsible for the security of your computer, Citadel’s Weekend Vulnerability and Patch Report is for you. We strongly urge you to take action to keep your system(s) patched and updated.

If someone else is responsible for the security of your computer, forward our Weekend Vulnerability and Patch Report to them and follow up to make sure your computer has been patched and updated.

Vulnerability management is a key element of cyber security management. Cyber criminals take over user computers by writing computer programs that “exploit” vulnerabilities in operating systems (Windows, Apple OS, etc) and application programs (Adobe Acrobat, Office, Flash, Java, etc). When software companies find a vulnerability, they usually issue an update patch to fix the code running in their customer’s computers.

Citadel publishes our Weekend Vulnerability and Patch Report to alert readers to some of the week’s important updates and vulnerabilities. Our focus is on software typically found in the small or home office (SOHO) or that users are likely to have on their home computer. The report is not intended to be a thorough listing of updates and vulnerabilities.

Copyright © 2017 Citadel Information Group. All rights reserved.

The post Weekend Vulnerability and Patch Report, December 3, 2017 appeared first on Citadel Information Group.

Jeff Snyder's, SecuirtyRecruiter.comSecurity Recruiter Blog, 719.686.8810

 

Cyber Security Vulnerability and Patch Report, October 15, 2017

Cyber Security Vulnerability and Patch Report

 

 

From our friends at

 Citadel Information Group

 

Important Security Updates

Adobe Flash Player: Adobe has released version 27.0.0.159. Updates are available from Adobe’s website.

Avira Antivirus: Avira has released version 15.0.32.12 of its free Antivirus. Updates are available from Avira’s website.

Mozilla Firefox: Mozilla has released version 56.0.1. Updates are available within the browser or from Mozilla’s website. 

LastPass: LastPass has released version 4.2.0 for its Free Password Manager. Updates are available from LastPass’ website.

Microsoft Patch Tuesday: Microsoft’s Patch Tuesday released updates to address dozens of vulnerabilities, some of which are highly critical within Windows operating systems, Microsoft Edge, Internet Explorer, Office, and other Microsoft products. Additional details are available at Microsoft’s website.

Opera: Opera has released version 48.0.2685.39. Updates are available from within the browser or from Opera’s website.

Spotify: Spotify has released version 1.0.65.320. Updates are available on Spotify’s website.

Current Software Versions

Adobe Flash 27.0.0.159

Adobe Reader DC 2017.012.20093

Dropbox 36.4.22 [Citadel warns against relying on security of Dropbox or other cloud-based file exchange systems. We recommend files containing sensitive information be independently encrypted with a program like Axcrypt; encryption keys be at least 15 characters long; and the master Dropbox [or other] password be at least 15 characters long and different from other passwords.]

Firefox 56.0.1 [Windows]

Google Chrome 61.0.3163.100

Internet Explorer 11.0.9600.18763

Java SE 8 Update 144 [Citadel recommends removing or disabling Java from your browser. Java is a major source of cyber criminal exploits. It is not needed for most internet browsing. If you have a particular web site that requires Java, Citadel recommends using a two-browser approach to minimize risk. If you normally browse the Web with Firefox, for example, disable the Java plugin in Firefox and use an alternative browser — such as Chrome, IE9, Safari, etc — with Java enabled to browse only the sites that require it.]

Microsoft Edge 40.15063.0.0

QuickTime 7.7.9 [Citadel recommends removing QuickTime. On April 14, 2016 US-CERT advised Microsoft Windows users to remove QuickTime. This followed a report in ars technica that Apple has no plans to update the Windows app despite at least two reliable QuickTime vulnerabilities that threaten Windows users who still have the program installed.]

Safari 10.1.2 [Mac OS X Mavericks, Yosemite, El Capitan]

Skype 7.40.0.103

For Your IT Department

Cisco Multiple Products: Cisco has released updates to address vulnerabilities in Adaptive Security Appliance Software, and others. Apply updates. Additional details are available at Cisco’s website.

 

*******************

If you are responsible for the security of your computer, Citadel’s Weekend Vulnerability and Patch Report is for you. We strongly urge you to take action to keep your workstation patched and updated.

If someone else is responsible for the security of your computer, forward our Weekend Vulnerability and Patch Report to them and follow up to make sure your computer has been patched and updated.

Vulnerability management is a key element of cyber security management. Cyber criminals take over user computers by writing computer programs that “exploit” vulnerabilities in operating systems (Windows, Apple OS, etc) and application programs (Adobe Acrobat, Office, Flash, Java, etc). When software companies find a vulnerability, they usually issue an update patch to fix the code running in their customer’s computers.

Citadel publishes our Weekend Vulnerability and Patch Report to alert readers to some of the week’s important updates and vulnerabilities. Our focus is on software typically found in the small or home office (SOHO) or that users are likely to have on their home computer. The report is not intended to be a thorough listing of updates and vulnerabilities.

Copyright © 2017 Citadel Information Group. All rights reserved.

The post Weekend Vulnerability and Patch Report, October 15, 2017 appeared first on Citadel Information Group.

Jeff Snyder's, SecuirtyRecruiter.comSecurity Recruiter Blog, 719.686.8810

 

Cyber Security Vulnerability and Patch Report, October 1, 2017

Cyber Security Vulnerability and Patch Report

 

From our friends at

 Citadel Information Group

 

Weekend Vulnerability and Patch Report, October 1, 2017

 

Important Security Updates

Apple Multiple Products: Apple has released updates in iOS, macOS Server, iCloud for Windows, macOS High Sierra, and others. Additional details are available on Apple’s website.

Mozilla Firefox: Mozilla has released version 56.0. Updates are available within the browser or from Mozilla’s website. 

Opera: Opera has released version 48.0.2685.32. Updates are available from within the browser or from Opera’s website.

Spotify: Spotify has released version 1.0.64.399. Updates are available on Spotify’s website.

Viber: Viber has released version 6.9.6.16 for Windows. Updates are available on Viber’s website.

Current Software Versions

Adobe Flash 27.0.0.130

Adobe Reader DC 2017.012.20093

Dropbox 34.4.20 [Citadel warns against relying on security of Dropbox or other cloud-based file exchange systems. We recommend files containing sensitive information be independently encrypted with a program like Axcrypt; encryption keys be at least 15 characters long; and the master Dropbox [or other] password be at least 15 characters long and different from other passwords.]

Firefox 56.0 [Windows]

Google Chrome 61.0.3163.100

Internet Explorer 11.0.9600.18763

Java SE 8 Update 144 [Citadel recommends removing or disabling Java from your browser. Java is a major source of cyber criminal exploits. It is not needed for most internet browsing. If you have a particular web site that requires Java, Citadel recommends using a two-browser approach to minimize risk. If you normally browse the Web with Firefox, for example, disable the Java plugin in Firefox and use an alternative browser — such as Chrome, IE9, Safari, etc — with Java enabled to browse only the sites that require it.]

Microsoft Edge 40.15063.0.0

QuickTime 7.7.9 [Citadel recommends removing QuickTime. On April 14, 2016 US-CERT advised Microsoft Windows users to remove QuickTime. This followed a report in ars technica that Apple has no plans to update the Windows app despite at least two reliable QuickTime vulnerabilities that threaten Windows users who still have the program installed.]

Safari 10.1.2 [Mac OS X Mavericks, Yosemite, El Capitan]

Skype 7.40.0.103

For Your IT Department

Cisco Multiple Products: Cisco has released updates to address vulnerabilities in IOS and IOS XE Software, Apache Struts 2, Mobility Express 1800 Access Point Series, Unified Customer Voice Portal, and others. Apply updates. Additional details are available at Cisco’s website.

 

*******************

If you are responsible for the security of your computer, Citadel’s Weekend Vulnerability and Patch Report is for you. We strongly urge you to take action to keep your workstation patched and updated.

If someone else is responsible for the security of your computer, forward our Weekend Vulnerability and Patch Report to them and follow up to make sure your computer has been patched and updated.

Vulnerability management is a key element of cyber security management. Cyber criminals take over user computers by writing computer programs that “exploit” vulnerabilities in operating systems (Windows, Apple OS, etc) and application programs (Adobe Acrobat, Office, Flash, Java, etc). When software companies find a vulnerability, they usually issue an update patch to fix the code running in their customer’s computers.

Citadel publishes our Weekend Vulnerability and Patch Report to alert readers to some of the week’s important updates and vulnerabilities. Our focus is on software typically found in the small or home office (SOHO) or that users are likely to have on their home computer. The report is not intended to be a thorough listing of updates and vulnerabilities.

Copyright © 2017 Citadel Information Group. All rights reserved.

The post Weekend Vulnerability and Patch Report, October 1, 2017 appeared first on Citadel Information Group.

Jeff Snyder's, SecuirtyRecruiter.comSecurity Recruiter Blog, 719.686.8810

Cyber Security Vulnerability and Patch Report, September 24, 2017

Cyber Security Vulnerability and Patch Report

 

From our friends at

 Citadel Information Group

 

Important Security Updates

Apple Multiple Products: Apple has released updates in Xcode 9 in macOS Sierra 10.1.6 or later, tvOS 11, watchOS 4, Safari 11, iOS 11, and others. Additional details are available on Apple’s website.

Avira Antivirus: Avira has released version 15.0.31.27 of its free Antivirus. Updates are available from Avira’s website.

Evernote: Evernote has released version 6.7.5.5825. Updates are available on Evernote’s website.

Google Chrome: Google has released Google Chrome version 61.0.3163.100. Updates are available from within the browser or from Google Chrome’s website.

Piriform CCleaner: Piriform has released version 5.35.6210 for CCleaner. Updates are available from Piriform’s website. Additional details about the recent security notification are available here on Piriform’s website.

Malwarebytes: Malwarebytes has released version 3.2.2.2029. Updates are available from Malwarebytes website.

TechSmith Corporation SnagIt: TechSmith has released version 13.1.4.8008 for SnagIt. Updates are available from TechSmith’s website.

Current Software Versions

Adobe Flash 27.0.0.130

Adobe Reader DC 2017.012.20093

Dropbox 34.4.20 [Citadel warns against relying on security of Dropbox or other cloud-based file exchange systems. We recommend files containing sensitive information be independently encrypted with a program like Axcrypt; encryption keys be at least 15 characters long; and the master Dropbox [or other] password be at least 15 characters long and different from other passwords.]

Firefox 55.0.3 [Windows]

Google Chrome 61.0.3163.100

Internet Explorer 11.0.9600.18763

Java SE 8 Update 144 [Citadel recommends removing or disabling Java from your browser. Java is a major source of cyber criminal exploits. It is not needed for most internet browsing. If you have a particular web site that requires Java, Citadel recommends using a two-browser approach to minimize risk. If you normally browse the Web with Firefox, for example, disable the Java plugin in Firefox and use an alternative browser — such as Chrome, IE9, Safari, etc — with Java enabled to browse only the sites that require it.]

Microsoft Edge 40.15063.0.0

QuickTime 7.7.9 [Citadel recommends removing QuickTime. On April 14, 2016 US-CERT advised Microsoft Windows users to remove QuickTime. This followed a report in ars technica that Apple has no plans to update the Windows app despite at least two reliable QuickTime vulnerabilities that threaten Windows users who still have the program installed.]

Safari 10.1.2 [Mac OS X Mavericks, Yosemite, El Capitan]

Skype 7.40.0.103

For Your IT Department

Cisco Multiple Products: Cisco has released updates to address vulnerabilities in Unified Customer Voice Portal Operations Console, Aironet 1800, 2800, 3800, 1830 and 1850 Series Access Points, Mobility Express 1800 Access Points, Apache Struts 2, IOS and IOS XE, Small Business Managed Switches, Email Security Appliance, Wide Area Application Services, UCS Center Software, Small Business SPA300, SPA500, and SPA51x Series, FindIT DLL, Unified Intelligence Center, Email Security Appliance, and others. Apply updates. Additional details are available at Cisco’s website.

WordPress: WordPress has released version 4.8.2. Apply updates. Additional details are available on WordPress’ website.

 

*******************

If you are responsible for the security of your computer, Citadel’s Weekend Vulnerability and Patch Report is for you. We strongly urge you to take action to keep your workstation patched and updated.

If someone else is responsible for the security of your computer, forward our Weekend Vulnerability and Patch Report to them and follow up to make sure your computer has been patched and updated.

Vulnerability management is a key element of cyber security management. Cyber criminals take over user computers by writing computer programs that “exploit” vulnerabilities in operating systems (Windows, Apple OS, etc) and application programs (Adobe Acrobat, Office, Flash, Java, etc). When software companies find a vulnerability, they usually issue an update patch to fix the code running in their customer’s computers.

Citadel publishes our Weekend Vulnerability and Patch Report to alert readers to some of the week’s important updates and vulnerabilities. Our focus is on software typically found in the small or home office (SOHO) or that users are likely to have on their home computer. The report is not intended to be a thorough listing of updates and vulnerabilities.

Copyright © 2017 Citadel Information Group. All rights reserved.

The post Weekend Vulnerability and Patch Report, September 24, 2017 appeared first on Citadel Information Group.

Jeff Snyder's, SecuirtyRecruiter.comSecurity Recruiter Blog, 719.686.8810

Cyber Security Vulnerability and Patch Report, September 10, 2017

Cyber Security Vulnerability and Patch Report

 

From our friends at

 Citadel Information Group

 

Important Security Updates

Avira Antivirus: Avira has released version 15.0.30.29 of its free Antivirus. Updates are available from Avira’s website.

Dropbox: Dropbox has released version 34.4.20 for its file hosting program. Updates are available at Dropbox’s website. [See Citadel’s warning below]

Google Chrome: Google has released Google Chrome version 61.0.3163.79. Updates are available from within the browser or from Google Chrome’s website.

Microsoft: Microsoft has released updates for Office, Project and Visio. These are available from the Control Panel.

Opera: Opera has released version 47.0.2631.80. Updates are available from within the browser or from Opera’s website.

Viber: Viber has released version 6.9.1.77 for Windows. Updates are available on Viber’s website.

Current Software Versions

Adobe Flash 26.0.0.151

Adobe Reader DC 2017.012.20093

Dropbox 34.4.20 [Citadel warns against relying on security of Dropbox or other cloud-based file exchange systems. We recommend files containing sensitive information be independently encrypted with a program like Axcrypt; encryption keys be at least 15 characters long; and the master Dropbox [or other] password be at least 15 characters long and different from other passwords.]

Firefox 55.0.3 [Windows]

Google Chrome 61.0.3163.79

Internet Explorer 11.0.9600.18763

Java SE 8 Update 144 [Citadel recommends removing or disabling Java from your browser. Java is a major source of cyber criminal exploits. It is not needed for most internet browsing. If you have a particular web site that requires Java, Citadel recommends using a two-browser approach to minimize risk. If you normally browse the Web with Firefox, for example, disable the Java plugin in Firefox and use an alternative browser — such as Chrome, IE9, Safari, etc — with Java enabled to browse only the sites that require it.]

Microsoft Edge 40.15063.0.0

QuickTime 7.7.9 [Citadel recommends removing QuickTime. On April 14, 2016 US-CERT advised Microsoft Windows users to remove QuickTime. This followed a report in ars technica that Apple has no plans to update the Windows app despite at least two reliable QuickTime vulnerabilities that threaten Windows users who still have the program installed.]

Safari 10.1.2 [Mac OS X Mavericks, Yosemite, El Capitan]

Skype 7.40.0.103

For Your IT Department

Cisco Multiple Products: Cisco has released updates to address vulnerabilities in Apache Struts 2, IOS, IOS XE, IoT Field Network Director, Unified Communication Manager, Yes Set-Top Box, SocialMiner XML, Prime LAN Management Solution, Prime Collaboration Provisioning Tool, IR800 Integrated Services Router, Firepower Management Center, Email Security Appliance, Unified Intelligence, Unity Connection, Cisco Meeting Server, Emergency Responder, Catalyst 4000 Series Switches, ASR 920 Series Routers, ASR 5500 System Architecture Evolution Gateway and others. Apply updates. Additional details are available at Cisco’s website.

McAfee: McAfee has released updates for it’s Threat Intelligence Exchange Server. Updates are available from McAfee’s website.

*******************

If you are responsible for the security of your computer, Citadel’s Weekend Vulnerability and Patch Report is for you. We strongly urge you to take action to keep your workstation patched and updated.

If someone else is responsible for the security of your computer, forward our Weekend Vulnerability and Patch Report to them and follow up to make sure your computer has been patched and updated.

Vulnerability management is a key element of cyber security management. Cyber criminals take over user computers by writing computer programs that “exploit” vulnerabilities in operating systems (Windows, Apple OS, etc) and application programs (Adobe Acrobat, Office, Flash, Java, etc). When software companies find a vulnerability, they usually issue an update patch to fix the code running in their customer’s computers.

Citadel publishes our Weekend Vulnerability and Patch Report to alert readers to some of the week’s important updates and vulnerabilities. Our focus is on software typically found in the small or home office (SOHO) or that users are likely to have on their home computer. The report is not intended to be a thorough listing of updates and vulnerabilities.

Copyright © 2017 Citadel Information Group. All rights reserved.

The post Weekend Vulnerability and Patch Report, September 10, 2017, appeared first on Citadel Information Group.

Jeff Snyder's, SecuirtyRecruiter.comSecurity Recruiter Blog, 719.686.8810

Cyber Security Vulnerability and Patch Report, September 3, 2017

Cyber Security Vulnerability and Patch Report

 

From our friends at

 Citadel Information Group

 

Important Security Updates

Avast: Avast has released version 17.6.2310 for Free Antivirus. Updates are available on Avast’s website. Avast! has also released updates for Premier Antivirus, Pro Antivirus and Internet Security.

Comodo Free Firewall: Comodo has released version 10.0.1.6294 of its free firewall and antivirus. Updates are available from Comodo’s website.

Opera: Opera has released version 47.0.2631.71. Updates are available from within the browser or from Opera’s website.

Skype: Skype has released Skype 7.40.0.103. Updates are available from the program or Skype’s website.

Current Software Versions

Adobe Flash 26.0.0.151

Adobe Reader DC 2017.012.20093

Dropbox 33.4.23 [Citadel warns against relying on security of Dropbox or other cloud-based file exchange systems. We recommend files containing sensitive information be independently encrypted with a program like Axcrypt; encryption keys be at least 15 characters long; and the master Dropbox [or other] password be at least 15 characters long and different from other passwords.]

Firefox 55.0.3 [Windows]

Google Chrome 60.0.3112.113

Internet Explorer 11.0.9600.18763

Java SE 8 Update 144 [Citadel recommends removing or disabling Java from your browser. Java is a major source of cyber criminal exploits. It is not needed for most internet browsing. If you have a particular web site that requires Java, Citadel recommends using a two-browser approach to minimize risk. If you normally browse the Web with Firefox, for example, disable the Java plugin in Firefox and use an alternative browser — such as Chrome, IE9, Safari, etc — with Java enabled to browse only the sites that require it.]

Microsoft Edge 40.15063.0.0

QuickTime 7.7.9 [Citadel recommends removing QuickTime. On April 14, 2016 US-CERT advised Microsoft Windows users to remove QuickTime. This followed a report in ars technica that Apple has no plans to update the Windows app despite at least two reliable QuickTime vulnerabilities that threaten Windows users who still have the program installed.]

Safari 10.1.2 [Mac OS X Mavericks, Yosemite, El Capitan]

Skype 7.40.0.103

For Your IT Department

None

*******************

If you are responsible for the security of your computer, Citadel’s Weekend Vulnerability and Patch Report is for you. We strongly urge you to take action to keep your workstation patched and updated.

If someone else is responsible for the security of your computer, forward our Weekend Vulnerability and Patch Report to them and follow up to make sure your computer has been patched and updated.

Vulnerability management is a key element of cyber security management. Cyber criminals take over user computers by writing computer programs that “exploit” vulnerabilities in operating systems (Windows, Apple OS, etc) and application programs (Adobe Acrobat, Office, Flash, Java, etc). When software companies find a vulnerability, they usually issue an update patch to fix the code running in their customer’s computers.

Citadel publishes our Weekend Vulnerability and Patch Report to alert readers to some of the week’s important updates and vulnerabilities. Our focus is on software typically found in the small or home office (SOHO) or that users are likely to have on their home computer. The report is not intended to be a thorough listing of updates and vulnerabilities.

Copyright © 2017 Citadel Information Group. All rights reserved.

The post Weekend Vulnerability and Patch Report, September 3, 2017 appeared first on Citadel Information Group.

Jeff Snyder's, SecuirtyRecruiter.comSecurity Recruiter Blog, 719.686.8810

 

 

Cyber Security Vulnerability and Patch Report, August 27, 2017

Cyber Security Vulnerability and Patch Report

  

From our friends at

 Citadel Information Group

Important Security Updates

AxCrypt: AxCrypt has released version 2.1.1534.0. Updates are available from AxCrypt’s website.

Dropbox: Dropbox has released version 33.4.23 for its file hosting program. Updates are available at Dropbox’s website. [See Citadel’s warning below]

Foxit Reader: Foxit has released Foxit Reader 8.3.2.25013 of its popular PDF-reader. Updates are available from within the program or from Foxit’s website.

Google Chrome: Google has released Google Chrome version 60.0.3112.113. Updates are available from within the browser or from Google Chrome’s website.

Google Earth Pro: Google has released version 7.3.0.3832 for Google Earth Pro. Updates are available from Google’s website.

LastPass: LastPass has released version 4.1.63 for its Free Password Manager. Updates are available from LastPass’ website.

Malwarebytes: Malwarebytes has released version 3.2.2.2018. Updates are available from Malwarebytes website.

Mozilla Firefox: Mozilla has released version 55.0.3. Updates are available within the browser or from Mozilla’s website. 

Current Software Versions

Adobe Flash 26.0.0.151

Adobe Reader DC 2017.012.20093

Dropbox 33.4.23 [Citadel warns against relying on security of Dropbox or other cloud-based file exchange systems. We recommend files containing sensitive information be independently encrypted with a program like Axcrypt; encryption keys be at least 15 characters long; and the master Dropbox [or other] password be at least 15 characters long and different from other passwords.]

Firefox 55.0.3 [Windows]

Google Chrome 60.0.3112.113

Internet Explorer 11.0.9600.18763

Java SE 8 Update 144 [Citadel recommends removing or disabling Java from your browser. Java is a major source of cyber criminal exploits. It is not needed for most internet browsing. If you have a particular web site that requires Java, Citadel recommends using a two-browser approach to minimize risk. If you normally browse the Web with Firefox, for example, disable the Java plugin in Firefox and use an alternative browser — such as Chrome, IE9, Safari, etc — with Java enabled to browse only the sites that require it.]

Microsoft Edge 40.15063.0.0

QuickTime 7.7.9 [Citadel recommends removing QuickTime. On April 14, 2016 US-CERT advised Microsoft Windows users to remove QuickTime. This followed a report in ars technica that Apple has no plans to update the Windows app despite at least two reliable QuickTime vulnerabilities that threaten Windows users who still have the program installed.]

Safari 10.1.2 [Mac OS X Mavericks, Yosemite, El Capitan]

Skype 7.39.0.102

For Your IT Department

Cisco Multiple Products: Cisco has released updates to address vulnerabilities in Smart Net Total Care, Meeting Server and others. Apply updates. Additional details are available at Cisco’s website.

TeamViewer: TeamViewer has released version 12.1.16680. Updates are available from TeamViewer’s website.

*******************

If you are responsible for the security of your computer, Citadel’s Weekend Vulnerability and Patch Report is for you. We strongly urge you to take action to keep your workstation patched and updated.

If someone else is responsible for the security of your computer, forward our Weekend Vulnerability and Patch Report to them and follow up to make sure your computer has been patched and updated.

Vulnerability management is a key element of cyber security management. Cyber criminals take over user computers by writing computer programs that “exploit” vulnerabilities in operating systems (Windows, Apple OS, etc) and application programs (Adobe Acrobat, Office, Flash, Java, etc). When software companies find a vulnerability, they usually issue an update patch to fix the code running in their customer’s computers.

Citadel publishes our Weekend Vulnerability and Patch Report to alert readers to some of the week’s important updates and vulnerabilities. Our focus is on software typically found in the small or home office (SOHO) or that users are likely to have on their home computer. The report is not intended to be a thorough listing of updates and vulnerabilities.

Copyright © 2017 Citadel Information Group. All rights reserved.

Jeff Snyder's, SecuirtyRecruiter.comSecurity Recruiter Blog, 719.686.8810

Cyber Security Vulnerability and Patch Report, August 20, 2017

Cybersecurity Vulnerability and Patch Report

From our friends at

 Citadel Information Group

 

Important Security Updates

1Password: 1Password has released version 4.6.9.90. Updates are available from 1Password’s website.

Google Chrome: Google has released Google Chrome version 60.0.3112.101. Updates are available from within the browser or from Google Chrome’s website.

Mozilla Firefox: Mozilla has released version 55.0.2. Updates are available within the browser or from Mozilla’s website.

Piriform CCleaner: Piriform has released version 5.33.6162 for CCleaner. Updates are available from Piriform’s website.

Current Software Versions

Adobe Flash 26.0.0.151

Adobe Reader DC 2017.012.20093

Dropbox 32.4.23 [Citadel warns against relying on security of Dropbox or other cloud-based file exchange systems. We recommend files containing sensitive information be independently encrypted with a program like Axcrypt; encryption keys be at least 15 characters long; and the master Dropbox [or other] password be at least 15 characters long and different from other passwords.]

Firefox 55.0.2 [Windows]

Google Chrome 60.0.3112.101

Internet Explorer 11.0.9600.18763

Java SE 8 Update 144 [Citadel recommends removing or disabling Java from your browser. Java is a major source of cyber criminal exploits. It is not needed for most internet browsing. If you have a particular web site that requires Java, Citadel recommends using a two-browser approach to minimize risk. If you normally browse the Web with Firefox, for example, disable the Java plugin in Firefox and use an alternative browser — such as Chrome, IE9, Safari, etc — with Java enabled to browse only the sites that require it.]

Microsoft Edge 40.15063.0.0

QuickTime 7.7.9 [Citadel recommends removing QuickTime. On April 14, 2016 US-CERT advised Microsoft Windows users to remove QuickTime. This followed a report in ars technica that Apple has no plans to update the Windows app despite at least two reliable QuickTime vulnerabilities that threaten Windows users who still have the program installed.]

Safari 10.1.2 [Mac OS X Mavericks, Yosemite, El Capitan]

Skype 7.39.0.102

For Your IT Department

Cisco Multiple Products: Cisco has released updates to address vulnerabilities in Virtual Network Function Element Manager, Application Policy Infrastructure, TelePresence Video Communication, Ultra Services Platform, Ultra Services Framework, Unified Communications Manager, Star OS for ASR 5000 Series Routers, Elastic Services Controller, Security Appliances, RV340, RV345 and RV345P Dual WAN, Policy Suite, Prime Infrastructure, AnyConnect WebLaunch and others. Apply updates. Additional details are available at Cisco’s website.

*******************

If you are responsible for the security of your computer, Citadel’s Weekend Vulnerability and Patch Report is for you. We strongly urge you to take action to keep your workstation patched and updated.

If someone else is responsible for the security of your computer, forward our Weekend Vulnerability and Patch Report to them and follow up to make sure your computer has been patched and updated.

Vulnerability management is a key element of cyber security management. Cyber criminals take over user computers by writing computer programs that “exploit” vulnerabilities in operating systems (Windows, Apple OS, etc) and application programs (Adobe Acrobat, Office, Flash, Java, etc). When software companies find a vulnerability, they usually issue an update patch to fix the code running in their customer’s computers.

Citadel publishes our Weekend Vulnerability and Patch Report to alert readers to some of the week’s important updates and vulnerabilities. Our focus is on software typically found in the small or home office (SOHO) or that users are likely to have on their home computer. The report is not intended to be a thorough listing of updates and vulnerabilities.

Copyright © 2017 Citadel Information Group. All rights reserved.

The post Weekend Vulnerability and Patch Report, August 20, 2017 appeared first on Citadel Information Group.

Jeff Snyder's, SecuirtyRecruiter.comSecurity Recruiter Blog, 719.686.8810

Cyber Security Vulnerability and Patch Report, August 13, 2017

Cyber Security Vulnerability and Patch Report

 

From our friends at

 Citadel Information Group

 

Important Security Updates

Adobe Flash Player: Adobe has released version 26.0.0.151. Updates are available from Adobe’s website. To see which version you have, go to Adobe’s web page.

Adobe Reader: Adobe has released version 2017.012.20093. Updates are available through the program’s Help menu/Check for Updates or from Adobe’s website. There is also an update for Acrobat.

Avira Antivirus: Avira has released version 15.0.29.32 of its free Antivirus and Pro. Updates are available from Avira’s website.

Dropbox: Dropbox has released version 32.4.23 for its file hosting program. Updates are available at Dropbox’s website. [See Citadel’s warning below]

LastPass: LastPass has released version 4.1.61 for its Free Password Manager. Updates are available from LastPass’ website.

Microsoft Patch Tuesday: Microsoft’s Patch Tuesday released updates to address dozens of vulnerabilities, some of which are highly critical within Windows operating systems, Microsoft Edge, Internet Explorer, Office, and other Microsoft products. Additional details are available at Microsoft’s website.

Mozilla Firefox: Mozilla has released version 55.0.1. Updates are available within the browser or from Mozilla’s website.

Panda Free Antivirus: Panda Free Antivirus has released version 18.03.0. Updates are available on Panda Security’s website.

Spotify: Spotify has released version 1.0.60.492. Updates are available on Spotify’s website.

Current Software Versions

Adobe Flash 26.0.0.151

Adobe Reader DC 2017.012.20093

Dropbox 32.4.23 [Citadel warns against relying on security of Dropbox or other cloud-based file exchange systems. We recommend files containing sensitive information be independently encrypted with a program like Axcrypt; encryption keys be at least 15 characters long; and the master Dropbox [or other] password be at least 15 characters long and different from other passwords.]

Firefox 55.0.1 [Windows]

Google Chrome 60.0.3112.90

Internet Explorer 11.0.9600.18763

Java SE 8 Update 144 [Citadel recommends removing or disabling Java from your browser. Java is a major source of cyber criminal exploits. It is not needed for most internet browsing. If you have a particular web site that requires Java, Citadel recommends using a two-browser approach to minimize risk. If you normally browse the Web with Firefox, for example, disable the Java plugin in Firefox and use an alternative browser — such as Chrome, IE9, Safari, etc — with Java enabled to browse only the sites that require it.]

Microsoft Edge 40.15063.0.0

QuickTime 7.7.9 [Citadel recommends removing QuickTime. On April 14, 2016 US-CERT advised Microsoft Windows users to remove QuickTime. This followed a report in ars technica that Apple has no plans to update the Windows app despite at least two reliable QuickTime vulnerabilities that threaten Windows users who still have the program installed.]

Safari 10.1.2 [Mac OS X Mavericks, Yosemite, El Capitan]

Skype 7.39.0.102

For Your IT Department

Cisco Multiple Products: Cisco has released updates to address vulnerabilities in WebEx, and others. Apply updates. Additional details are available at Cisco’s website.

VMware: Cisco has released updates to address vulnerabilities in VMware NSX-V Edge. Additional details are available at VMware’s website.

*******************

If you are responsible for the security of your computer, Citadel’s Weekend Vulnerability and Patch Report is for you. We strongly urge you to take action to keep your workstation patched and updated.

If someone else is responsible for the security of your computer, forward our Weekend Vulnerability and Patch Report to them and follow up to make sure your computer has been patched and updated.

Vulnerability management is a key element of cyber security management. Cyber criminals take over user computers by writing computer programs that “exploit” vulnerabilities in operating systems (Windows, Apple OS, etc) and application programs (Adobe Acrobat, Office, Flash, Java, etc). When software companies find a vulnerability, they usually issue an update patch to fix the code running in their customer’s computers.

Citadel publishes our Weekend Vulnerability and Patch Report to alert readers to some of the week’s important updates and vulnerabilities. Our focus is on software typically found in the small or home office (SOHO) or that users are likely to have on their home computer. The report is not intended to be a thorough listing of updates and vulnerabilities.

Copyright © 2017 Citadel Information Group. All rights reserved.

The post Weekend Vulnerability and Patch Report, August 13, 2017 appeared first on Citadel Information Group.

Jeff Snyder's, SecuirtyRecruiter.comSecurity Recruiter Blog, 719.686.8810

 

 

 

 

 

Cyber Security Vulnerability and Patch Report, August 6, 2017

Cyber Security Vulnerability and Patch Report

 

From our friends at

 Citadel Information Group

 

Important Security Updates

AxCrypt: AxCrypt has released version 2.1.1526.0. Updates are available from AxCrypt’s website.

Dropbox: Dropbox has released version 31.4.24 for its file hosting program. Updates are available at Dropbox’s website. [See Citadel’s warning below]

Evernote: Evernote has released version 6.6.4.5512. Updates are available on Evernote’s website.

Google Chrome: Google has released Google Chrome version 60.0.3112.90. Updates are available from within the browser or from Google Chrome’s website.

Skype: Skype has released Skype 7.39.0.102. Updates are available from the program or Skype’s website.

Current Software Versions

Adobe Flash 26.0.0.137

Adobe Reader DC 17.009.20044

Dropbox 30.4.24 [Citadel warns against relying on security of Dropbox or other cloud-based file exchange systems. We recommend files containing sensitive information be independently encrypted with a program like Axcrypt; encryption keys be at least 15 characters long; and the master Dropbox [or other] password be at least 15 characters long and different from other passwords.]

Firefox 54.0.1 [Windows]

Google Chrome 60.0.3112.90

Internet Explorer 11.0.9600.18739

Java SE 8 Update 144 [Citadel recommends removing or disabling Java from your browser. Java is a major source of cyber criminal exploits. It is not needed for most internet browsing. If you have a particular web site that requires Java, Citadel recommends using a two-browser approach to minimize risk. If you normally browse the Web with Firefox, for example, disable the Java plugin in Firefox and use an alternative browser — such as Chrome, IE9, Safari, etc — with Java enabled to browse only the sites that require it.]

Microsoft Edge 40.15063.0.0

QuickTime 7.7.9 [Citadel recommends removing QuickTime. On April 14, 2016 US-CERT advised Microsoft Windows users to remove QuickTime. This followed a report in ars technica that Apple has no plans to update the Windows app despite at least two reliable QuickTime vulnerabilities that threaten Windows users who still have the program installed.]

Safari 10.1.2 [Mac OS X Mavericks, Yosemite, El Capitan]

Skype 7.39.0.102

For Your IT Department

Cisco Multiple Products: Cisco has released updates to address vulnerabilities in Adaptive Security Appliance, Videoscape Distribution Suite, Identity Services Engine, Unified Communications Manager, Smart Net Total Care Software, Prime Collaboration, Meeting Server H.264, Firepower, Jabber Guest Server, Finesse, and others. Apply updates. Additional details are available at Cisco’s website.

 

*******************

If you are responsible for the security of your computer, Citadel’s Weekend Vulnerability and Patch Report is for you. We strongly urge you to take action to keep your workstation patched and updated.

If someone else is responsible for the security of your computer, forward our Weekend Vulnerability and Patch Report to them and follow up to make sure your computer has been patched and updated.

Vulnerability management is a key element of cyber security management. Cyber criminals take over user computers by writing computer programs that “exploit” vulnerabilities in operating systems (Windows, Apple OS, etc) and application programs (Adobe Acrobat, Office, Flash, Java, etc). When software companies find a vulnerability, they usually issue an update patch to fix the code running in their customer’s computers.

Citadel publishes our Weekend Vulnerability and Patch Report to alert readers to some of the week’s important updates and vulnerabilities. Our focus is on software typically found in the small or home office (SOHO) or that users are likely to have on their home computer. The report is not intended to be a thorough listing of updates and vulnerabilities.

Copyright © 2017 Citadel Information Group. All rights reserved.

The post Weekend Vulnerability and Patch Report, August 6, 2017 appeared first on Citadel Information Group.

 

Jeff Snyder's, SecuirtyRecruiter.comSecurity Recruiter Blog, 719.686.8810

 

Cyber Security Vulnerability and Patch Report, July 30, 2017

Cybersecurity Vulnerability and Patch Report

 

From our friends at

 Citadel Information Group

 

Important Security Updates

Google Chrome: Google has released Google Chrome version 60.0.3112.78. Updates are available from within the browser or from Google Chrome’s website.

Google Earth Pro: Google has released version 7.3.0.3830 for Google Earth Pro. Updates are available from Google’s website.

Oracle Java: Oracle has released versions Java SE 8 Update 144. The update is available through Windows Control Panel or Java’s website. [See Citadel’s recommendation below]

RoboForm: Siber Systems has released Version 8.3.9. Updates are available from within the program or from RoboForm’s website.

Viber for Windows: Viber has released version 6.8.6.5 for Windows. Updates are available on Viber’s website.

Current Software Versions

Adobe Flash 26.0.0.137

Adobe Reader DC 17.009.20044

Dropbox 30.4.22 [Citadel warns against relying on security of Dropbox or other cloud-based file exchange systems. We recommend files containing sensitive information be independently encrypted with a program like Axcrypt; encryption keys be at least 15 characters long; and the master Dropbox [or other] password be at least 15 characters long and different from other passwords.]

Firefox 54.0.1 [Windows]

Google Chrome 60.0.3112.78

Internet Explorer 11.0.9600.18739

Java SE 8 Update 144 [Citadel recommends removing or disabling Java from your browser. Java is a major source of cyber criminal exploits. It is not needed for most internet browsing. If you have a particular web site that requires Java, Citadel recommends using a two-browser approach to minimize risk. If you normally browse the Web with Firefox, for example, disable the Java plugin in Firefox and use an alternative browser — such as Chrome, IE9, Safari, etc — with Java enabled to browse only the sites that require it.]

Microsoft Edge 40.15063.0.0

QuickTime 7.7.9 [Citadel recommends removing QuickTime. On April 14, 2016 US-CERT advised Microsoft Windows users to remove QuickTime. This followed a report in ars technica that Apple has no plans to update the Windows app despite at least two reliable QuickTime vulnerabilities that threaten Windows users who still have the program installed.]

Safari 10.1.2 [Mac OS X Mavericks, Yosemite, El Capitan]

Skype 7.38.0.101

For Your IT Department

Cisco Multiple Products: Cisco has released updates to address vulnerabilities in IOS and IOS XE, Access Control System, Multiple Cisco Products OSPF and others. Apply updates. Additional details are available at Cisco’s website.

McAfee: McAfee has released a security bulletin to address multiple vulnerabilities in Web Gateway. Updates are available from McAfee’s website.

TeamViewer: TeamViewer has released version 12.1.15448.0. Updates are available from TeamViewer’s website.

*******************

If you are responsible for the security of your computer, Citadel’s Weekend Vulnerability and Patch Report is for you. We strongly urge you to take action to keep your workstation patched and updated.

If someone else is responsible for the security of your computer, forward our Weekend Vulnerability and Patch Report to them and follow up to make sure your computer has been patched and updated.

Vulnerability management is a key element of cyber security management. Cyber criminals take over user computers by writing computer programs that “exploit” vulnerabilities in operating systems (Windows, Apple OS, etc) and application programs (Adobe Acrobat, Office, Flash, Java, etc). When software companies find a vulnerability, they usually issue an update patch to fix the code running in their customer’s computers.

Citadel publishes our Weekend Vulnerability and Patch Report to alert readers to some of the week’s important updates and vulnerabilities. Our focus is on software typically found in the small or home office (SOHO) or that users are likely to have on their home computer. The report is not intended to be a thorough listing of updates and vulnerabilities.

Copyright © 2017 Citadel Information Group. All rights reserved.

The post Weekend Vulnerability and Patch Report, July 30, 2017 appeared first on Citadel Information Group.

Jeff Snyder's, SecuirtyRecruiter.comSecurity Recruiter Blog, 719.686.8810

Cyber Security Vulnerability and Patch Report, July 23, 2017

 

From our friends at

 Citadel Information Group

Important Security Updates

Apple iTunes: Apple has released version 12.6.2 (64-bit and 32-bit) of iTunes. Updates are available from Apple’s website.

Apple Multiple Products: Apple has released updates in tvOS 10.2.2, iCloud for Windows 6.2.2, Safari 10.1.2, macOS Sierra 10.12.6, OS X El Capitan 10.11.6, OS X Yosemite 10.10.5, IOS 10.3.3, watchOS 3.2.3 and others. Additional details are available on Apple’s website.

Avast: Avast! Free Antivirus has released version 17.5.2303. Updates are available on Avast’s website. Avast! has also released updates for Premier Antivirus, Pro Antivirus and Internet Security.

Opera: Opera has released version 46.0.2597.57. Updates are available from within the browser or from Opera’s website.

Oracle Java: Oracle has released versions Java SE 8 Update 141. The update is available through Windows Control Panel or Java’s website. [See Citadel’s recommendation below]

Current Software Versions

Adobe Flash 26.0.0.137

Adobe Reader DC 17.009.20044

Dropbox 30.4.22 [Citadel warns against relying on security of Dropbox or other cloud-based file exchange systems. We recommend files containing sensitive information be independently encrypted with a program like Axcrypt; encryption keys be at least 15 characters long; and the master Dropbox [or other] password be at least 15 characters long and different from other passwords.]

Firefox 54.0.1 [Windows]

Google Chrome 59.0.3071.115

Internet Explorer 11.0.9600.18739

Java SE 8 Update 141 [Citadel recommends removing or disabling Java from your browser. Java is a major source of cyber criminal exploits. It is not needed for most internet browsing. If you have a particular web site that requires Java, Citadel recommends using a two-browser approach to minimize risk. If you normally browse the Web with Firefox, for example, disable the Java plugin in Firefox and use an alternative browser — such as Chrome, IE9, Safari, etc — with Java enabled to browse only the sites that require it.]

Microsoft Edge 40.15063.0.0

QuickTime 7.7.9 [Citadel recommends removing QuickTime. On April 14, 2016 US-CERT advised Microsoft Windows users to remove QuickTime. This followed a report in ars technica that Apple has no plans to update the Windows app despite at least two reliable QuickTime vulnerabilities that threaten Windows users who still have the program installed.]

Safari 10.1.2 [Mac OS X Mavericks, Yosemite, El Capitan]

Skype 7.38.0.101

For Your IT Department

Cisco Multiple Products: Cisco has released updates to address vulnerabilities in SNMP, WebEx, Web Security Appliance, Prime, ASR 5000 Series and others. Apply updates. Additional details are available at Cisco’s website.

*******************

If you are responsible for the security of your computer, Citadel’s Weekend Vulnerability and Patch Report is for you. We strongly urge you to take action to keep your workstation patched and updated.

If someone else is responsible for the security of your computer, forward our Weekend Vulnerability and Patch Report to them and follow up to make sure your computer has been patched and updated.

Vulnerability management is a key element of cyber security management. Cyber criminals take over user computers by writing computer programs that “exploit” vulnerabilities in operating systems (Windows, Apple OS, etc) and application programs (Adobe Acrobat, Office, Flash, Java, etc). When software companies find a vulnerability, they usually issue an update patch to fix the code running in their customer’s computers.

Citadel publishes our Weekend Vulnerability and Patch Report to alert readers to some of the week’s important updates and vulnerabilities. Our focus is on software typically found in the small or home office (SOHO) or that users are likely to have on their home computer. The report is not intended to be a thorough listing of updates and vulnerabilities.

Copyright © 2017 Citadel Information Group. All rights reserved.

Jeff Snyder's, SecuirtyRecruiter.comSecurity Recruiter Blog, 719.686.8810

Cyber Security Vulnerability and Patch Report, July 16, 2017

Cybersecurity Vulnerability and Patch Report

 

From our friends at

 Citadel Information Group

 

Weekend Vulnerability and Patch Report, July 16, 2017

 

Important Security Updates

Adobe Flash Player: Adobe has released version 26.0.0.137. Updates are available from Adobe’s website. To see which version you have, go to Adobe’s web page.

Avira Antivirus: Avira has released version 15.0.28.28 of its free Antivirus and Pro. Updates are available from Avira’s website.

Dropbox: Dropbox has released version 30.4.22 for its file hosting program. Updates are available at Dropbox’s website. [See Citadel’s warning below]

Google Drive: Google has released version 3.35.5978.2967 of its Google Drive. Updates are available from Google’s website.

LastPass: LastPass has released version 4.1.60 for its Free Password Manager. Updates are available from LastPass’ website.

Microsoft Patch Tuesday: Microsoft’s Patch Tuesday released updates to address almost a hundred vulnerabilities, some of which are highly critical within Windows operating systems, Microsoft Edge, Internet Explorer, Office, and other Microsoft products. Additional details are available at Microsoft’s website.

Opera: Opera has released version 46.0.2597.46. Updates are available from within the browser or from Opera’s website.

Piriform CCleaner: Piriform has released version 5.32.6129 for CCleaner. Updates are available from Piriform’s website.

Current Software Versions

Adobe Flash 26.0.0.137

Adobe Reader DC 17.009.20044

Dropbox 30.4.22 [Citadel warns against relying on security of Dropbox or other cloud-based file exchange systems. We recommend files containing sensitive information be independently encrypted with a program like Axcrypt; encryption keys be at least 15 characters long; and the master Dropbox [or other] password be at least 15 characters long and different from other passwords.]

Firefox 54.0.1 [Windows]

Google Chrome 59.0.3071.115

Internet Explorer 11.0.9600.18739

Java SE 8 Update 131 [Citadel recommends removing or disabling Java from your browser. Java is a major source of cyber criminal exploits. It is not needed for most internet browsing. If you have a particular web site that requires Java, Citadel recommends using a two-browser approach to minimize risk. If you normally browse the Web with Firefox, for example, disable the Java plugin in Firefox and use an alternative browser — such as Chrome, IE9, Safari, etc — with Java enabled to browse only the sites that require it.]

Microsoft Edge 40.15063.0.0

QuickTime 7.7.9 [Citadel recommends removing QuickTime. On April 14, 2016 US-CERT advised Microsoft Windows users to remove QuickTime. This followed a report in ars technica that Apple has no plans to update the Windows app despite at least two reliable QuickTime vulnerabilities that threaten Windows users who still have the program installed.]

Safari 10.1.1 [Mac OS X Mavericks, Yosemite, El Capitan]

Skype 7.38.0.101

For Your IT Department

Cisco Multiple Products: Cisco has released updates to address vulnerabilities in SNMP, Samba Affecting Cisco Products and others. Apply updates. Additional details are available at Cisco’s website.

*******************

If you are responsible for the security of your computer, Citadel’s Weekend Vulnerability and Patch Report is for you. We strongly urge you to take action to keep your workstation patched and updated.

If someone else is responsible for the security of your computer, forward our Weekend Vulnerability and Patch Report to them and follow up to make sure your computer has been patched and updated.

Vulnerability management is a key element of cyber security management. Cyber criminals take over user computers by writing computer programs that “exploit” vulnerabilities in operating systems (Windows, Apple OS, etc) and application programs (Adobe Acrobat, Office, Flash, Java, etc). When software companies find a vulnerability, they usually issue an update patch to fix the code running in their customer’s computers.

Citadel publishes our Weekend Vulnerability and Patch Report to alert readers to some of the week’s important updates and vulnerabilities. Our focus is on software typically found in the small or home office (SOHO) or that users are likely to have on their home computer. The report is not intended to be a thorough listing of updates and vulnerabilities.

Copyright © 2017 Citadel Information Group. All rights reserved.

The post Weekend Vulnerability and Patch Report, July 16, 2017 appeared first on Citadel Information Group.

Jeff Snyder's, SecuirtyRecruiter.comSecurity Recruiter Blog, 719.686.8810

Cyber Security Vulnerability and Patch Report, June 25, 2017

Cybersecurity Vulnerability and Patch Report

 

From our friends at Citadel Information Group

Weekend Vulnerability and Patch Report, June 25, 2017

 

Important Security Updates

Apple Remote Desktop: Apple has has released Apple Remote Desktop 3.9.3. Updates are available from within the browser or from Apple’s website.

Google Chrome: Google has released Google Chrome version 59.0.3071.100. Updates are available from within the browser or from Google Chrome’s website.

LastPass: LastPass has released version 4.1.55 for its Free Password Manager. Updates are available from LastPass’ website.

Opera: Opera has released version 46.0.2597.26. Updates are available from within the browser or from Opera’s website.

RoboForm: Siber Systems has released Version 8.3.7. Updates are available from within the program or from RoboForm’s website.

Current Software Versions

Adobe Flash 26.0.0.131

Adobe Reader DC 2017.009.20044

Dropbox 28.4.14 [Citadel warns against relying on security of Dropbox or other cloud-based file exchange systems. We recommend files containing sensitive information be independently encrypted with a program like Axcrypt; encryption keys be at least 15 characters long; and the master Dropbox [or other] password be at least 15 characters long and different from other passwords.]

Firefox 54.0 [Windows]

Google Chrome 59.0.3071.109

Internet Explorer 11.0.9600.18639

Java SE 8 Update 131 [Citadel recommends removing or disabling Java from your browser. Java is a major source of cyber criminal exploits. It is not needed for most internet browsing. If you have a particular web site that requires Java, Citadel recommends using a two-browser approach to minimize risk. If you normally browse the Web with Firefox, for example, disable the Java plugin in Firefox and use an alternative browser — such as Chrome, IE9, Safari, etc — with Java enabled to browse only the sites that require it.]

Microsoft Edge 40.15063.0.0

QuickTime 7.7.9 [Citadel recommends removing QuickTime. On April 14, 2016 US-CERT advised Microsoft Windows users to remove QuickTime. This followed a report in ars technica that Apple has no plans to update the Windows app despite at least two reliable QuickTime vulnerabilities that threaten Windows users who still have the program installed.]

Safari 10.1.1 [Mac OS X Mavericks, Yosemite, El Capitan]

Skype 7.37.0.103

For Your IT Department

Cisco Multiple Products: Cisco has released updates to address vulnerabilities in Virtualized Packet Core-Distributed Instance (VPC-DI), WebEx Network Recording Player, Prime Infrastructure and Evolved Programmable Network Manager, Wide Area Application Services, Unified Contact Center Express, Primte Infrastructure Web Framework, Prime Collaboration Provisioning Tool, Identity Services Engine, IOS XR, Firepower Management Center, SocialMiner, StarOS for ASR 5000 Series Routers, OpenSSL Affecting Cisco Products and others. Apply updates. Additional details are available at Cisco’s website.

McAfee: McAfee has released updates to address vulnerabilities in Web Gateway, Data Loss Prevention and others. Additional details are available on McAfee’s website.

*******************

If you are responsible for the security of your computer, Citadel’s Weekend Vulnerability and Patch Report is for you. We strongly urge you to take action to keep your workstation patched and updated.

If someone else is responsible for the security of your computer, forward our Weekend Vulnerability and Patch Report to them and follow up to make sure your computer has been patched and updated.

Vulnerability management is a key element of cyber security management. Cyber criminals take over user computers by writing computer programs that “exploit” vulnerabilities in operating systems (Windows, Apple OS, etc) and application programs (Adobe Acrobat, Office, Flash, Java, etc). When software companies find a vulnerability, they usually issue an update patch to fix the code running in their customer’s computers.

Citadel publishes our Weekend Vulnerability and Patch Report to alert readers to some of the week’s important updates and vulnerabilities. Our focus is on software typically found in the small or home office (SOHO) or that users are likely to have on their home computer. The report is not intended to be a thorough listing of updates and vulnerabilities.

Jeff Snyder's, SecuirtyRecruiter.comSecurity Recruiter Blog, 719.686.8810

Cyber Security Vulnerability and Patch Report, June 18, 2017

 

Weekend Vulnerability and Patch Report, June 11, 2017

From our friends at Citadel Information Group

 

Important Security Updates

Adobe Flash Player: Adobe has released version 26.0.0.131. Updates are available from Adobe’s website. To see which version you have, go to Adobe’s web page.

Adobe Shockwave Player: Adobe has released version 12.2.9.199 of Shockwave Player running on Windows and Macintosh. Updates are available through the program or from Adobe’s Shockwave Web Site.

Avira Free Antivirus: Avira has released version 15.0.27.34 of its free Antivirus. Updates are available from Avira’s website.

AxCrypt: AxCrypt has released version 2.1.1509.0. Updates are available from AxCrypt’s website.

Comodo Free Firewall: Comodo has released version 10.0.1.6246 of its free firewall and antivirus. Updates are available from Comodo’s website.

Dropbox: Dropbox has released version 28.4.14 for its file hosting program. Updates are available at Dropbox’s website. [See Citadel’s warning below]

Google Chrome: Google has released Google Chrome version 59.0.3071.104. Updates are available from within the browser or from Google Chrome’s website.

Microsoft Patch Tuesday: Microsoft’s Patch Tuesday released updates to address almost a hundred vulnerabilities, some of which are highly critical within Windows operating systems, Microsoft Edge, Internet Explorer, Office, and other Microsoft products. Additional details are available at Microsoft’s website.

Mozilla Firefox: Mozilla has released version 54.0. Updates are available within the browser or from Mozilla’s website.

Opera: Opera has released version 45.0.2552.898. Updates are available from within the browser or from Opera’s website.

Piriform CCleaner: Piriform has released version 5.31.6105 for CCleaner. Updates are available from Piriform’s website.

Viber: Viber has released version 6.8.2.878 for Windows. Updates are available on Viber’s website.

Current Software Versions

Adobe Flash 26.0.0.131

Adobe Reader DC 2017.009.20044

Dropbox 28.4.14 [Citadel warns against relying on security of Dropbox or other cloud-based file exchange systems. We recommend files containing sensitive information be independently encrypted with a program like Axcrypt; encryption keys be at least 15 characters long; and the master Dropbox [or other] password be at least 15 characters long and different from other passwords.]

Firefox 54.0 [Windows]

Google Chrome 59.0.3071.104

Internet Explorer 11.0.9600.18639

Java SE 8 Update 131 [Citadel recommends removing or disabling Java from your browser. Java is a major source of cyber criminal exploits. It is not needed for most internet browsing. If you have a particular web site that requires Java, Citadel recommends using a two-browser approach to minimize risk. If you normally browse the Web with Firefox, for example, disable the Java plugin in Firefox and use an alternative browser — such as Chrome, IE9, Safari, etc — with Java enabled to browse only the sites that require it.]

Microsoft Edge 40.15063.0.0

QuickTime 7.7.9 [Citadel recommends removing QuickTime. On April 14, 2016 US-CERT advised Microsoft Windows users to remove QuickTime. This followed a report in ars technica that Apple has no plans to update the Windows app despite at least two reliable QuickTime vulnerabilities that threaten Windows users who still have the program installed.]

Safari 10.1.1 [Mac OS X Mavericks, Yosemite, El Capitan]

Skype 7.37.0.103

For Your IT Department

Cisco Multiple Products: Cisco has released updates to address vulnerabilities in Samba which is affecting Cisco Products and others. Apply updates. Additional details are available at Cisco’s website.

WordPress: WordPress has released version 4.8. Apply updates. Additional details are available on WordPress’ website.

*******************

If you are responsible for the security of your computer, Citadel’s Weekend Vulnerability and Patch Report is for you. We strongly urge you to take action to keep your workstation patched and updated.

If someone else is responsible for the security of your computer, forward our Weekend Vulnerability and Patch Report to them and follow up to make sure your computer has been patched and updated.

Vulnerability management is a key element of cyber security management. Cyber criminals take over user computers by writing computer programs that “exploit” vulnerabilities in operating systems (Windows, Apple OS, etc) and application programs (Adobe Acrobat, Office, Flash, Java, etc). When software companies find a vulnerability, they usually issue an update patch to fix the code running in their customer’s computers.

Citadel publishes our Weekend Vulnerability and Patch Report to alert readers to some of the week’s important updates and vulnerabilities. Our focus is on software typically found in the small or home office (SOHO) or that users are likely to have on their home computer. The report is not intended to be a thorough listing of updates and vulnerabilities.

Copyright © 2017 Citadel Information Group. All rights reserve

Jeff Snyder's, SecuirtyRecruiter.comSecurity Recruiter Blog, 719.686.8810

 

Cyber Security Vulnerability and Task Report, June 11, 2017

Cyber Security Vulnerability and Patch Report

Weekend Vulnerability and Patch Report, June 11, 2017

From our friends at Citadel Information Group

Important Security Updates

Google Chrome: Google has released Google Chrome version 59.0.3071.86. Updates are available from within the browser or from Google Chrome’s website.

KeePass: KeePass has released version 1.33 of its open source password manager. Updates are available from the KeePass website.

Apple Multiple Products: Apple has released updates to address vulnerabilities in macOS Sierra, MacBook Pro with Touch Bar Update, and others. Additional details are available on Apple’s website.

Skype: Skype has released Skype 7.37.0.103. Updates are available from the program or Skype’s website.

Current Software Versions

Adobe Flash 25.0.0.171

Adobe Reader DC 2017.009.20044

Dropbox 27.4.22 [Citadel warns against relying on security of Dropbox or other cloud-based file exchange systems. We recommend files containing sensitive information be independently encrypted with a program like Axcrypt; encryption keys be at least 15 characters long; and the master Dropbox [or other] password be at least 15 characters long and different from other passwords.]

Firefox 53.0.3 [Windows]

Google Chrome 59.0.3071.86

Internet Explorer 11.0.9600.18639

Java SE 8 Update 131 [Citadel recommends removing or disabling Java from your browser. Java is a major source of cyber criminal exploits. It is not needed for most internet browsing. If you have a particular web site that requires Java, Citadel recommends using a two-browser approach to minimize risk. If you normally browse the Web with Firefox, for example, disable the Java plugin in Firefox and use an alternative browser — such as Chrome, IE9, Safari, etc — with Java enabled to browse only the sites that require it.]

Microsoft Edge 40.15063.0.0

QuickTime 7.7.9 [Citadel recommends removing QuickTime. On April 14, 2016 US-CERT advised Microsoft Windows users to remove QuickTime. This followed a report in ars technica that Apple has no plans to update the Windows app despite at least two reliable QuickTime vulnerabilities that threaten Windows users who still have the program installed.]

Safari 10.1.1 [Mac OS X Mavericks, Yosemite, El Capitan]

Skype 7.37.0.103

For Your IT Department

Cisco Multiple Products: Cisco has released updates to address vulnerabilities in FirePOWER System Software, NX-OS, Prime Data Center Network Manager, TelePresence Endpoint, AnyConnect, Ultra Services Platform, Ultra Services Framework, StarOS, IP Phone 8800 Series, Prime Collaboration Assurance, Network Convergence System 5500 Series Routers, Industrial Network Director, Firepower Management Center, Elastic Services Controller, Email Security Appliance, Email Security and Content Security Management Appliance, Unified Communications Domain Manager, Context Service and others. Apply updates. Additional details are available at Cisco’s website.

VMware: VMware has released updates for vSphere Data Protection (VDP). Updates are available from VMware’s website.

*******************

If you are responsible for the security of your computer, Citadel’s Weekend Vulnerability and Patch Report is for you. We strongly urge you to take action to keep your workstation patched and updated.

If someone else is responsible for the security of your computer, forward our Weekend Vulnerability and Patch Report to them and follow up to make sure your computer has been patched and updated.

Vulnerability management is a key element of cyber security management. Cyber criminals take over user computers by writing computer programs that “exploit” vulnerabilities in operating systems (Windows, Apple OS, etc) and application programs (Adobe Acrobat, Office, Flash, Java, etc). When software companies find a vulnerability, they usually issue an update patch to fix the code running in their customer’s computers.

Citadel publishes our Weekend Vulnerability and Patch Report to alert readers to some of the week’s important updates and vulnerabilities. Our focus is on software typically found in the small or home office (SOHO) or that users are likely to have on their home computer. The report is not intended to be a thorough listing of updates and vulnerabilities.

Copyright © 2017 Citadel Information Group. All rights reserved

The post Weekend Vulnerability and Patch Report, June 11, 2017 appeared first on Citadel Information Group.

Jeff Snyder's, SecuirtyRecruiter.com, Security Recruiter Blog, 719.686.8810

Cyber Security Vulnerability and Patch Report, June 4, 2017

Cybersecurity Vulnerability and Patch Report

CYBERSECURITY VULNERABILITY

AND PATCH REPORT

 

FROM OUR FRIENDS AT CITADEL INFORMATION GROUP

 

 

Important Security Updates

Dropbox: Dropbox has released version 27.4.22 for its file hosting program. Updates are available atDropbox’s website. [See Citadel’s warning below]

Opera: Opera has released version 45.0.2552.888. Updates are available from within the browser or fromOpera’s website.

RoboForm: Siber Systems has released Version 8.3.5. Updates are available from within the program or from RoboForm’s website.

Current Software Versions

Adobe Flash 25.0.0.171

Adobe Reader DC 2017.009.20044

Dropbox 27.4.22 [Citadel warns against relying on security of Dropbox or other cloud-based file exchange systems. We recommend files containing sensitive information be independently encrypted with a program like Axcrypt; encryption keys be at least 15 characters long; and the master Dropbox [or other] password be at least 15 characters long and different from other passwords.]

Firefox 53.0.3 [Windows]

Google Chrome 58.0.3029.110

Internet Explorer 11.0.9600.18639

Java SE 8 Update 131 [Citadel recommends removing or disabling Java from your browser. Java is a major source of cyber criminal exploits. It is not needed for most internet browsing. If you have a particular web site that requires Java, Citadel recommends using a two-browser approach to minimize risk. If you normally browse the Web with Firefox, for example, disable the Java plugin in Firefox and use an alternative browser — such as Chrome, IE9, Safari, etc — with Java enabled to browse only the sites that require it.]

Microsoft Edge 40.15063.0.0

QuickTime 7.7.9 [Citadel recommends removing QuickTime. On April 14, 2016 US-CERT advised Microsoft Windows users to remove QuickTime. This followed a report in ars technica that Apple has no plans to update the Windows app despite at least two reliable QuickTime vulnerabilities that threaten Windows users who still have the program installed.]

Safari 10.1.1 [Mac OS X Mavericks, Yosemite, El Capitan]

Skype 7.36.0.101

For Your IT Department

Cisco Multiple Products: Cisco has released updates to address vulnerabilities in Samba, Integrated Management Controller, Aironet 1830 and 1850 Series Access Points, Linux Kernel Affecting Cisco Products and others. Apply updates. Additional details are available at Cisco’s website. Cisco has also released breach guidance for OneLogin at Cisco’s website.

TeamViewer: TeamViewer has released version 12.1.12777.0. Updates are available from TeamViewer’s website.

 

*******************

If you are responsible for the security of your computer, Citadel’s Weekend Vulnerability and Patch Report is for you. We strongly urge you to take action to keep your workstation patched and updated.

If someone else is responsible for the security of your computer, forward our Weekend Vulnerability and Patch Report to them and follow up to make sure your computer has been patched and updated.

Vulnerability management is a key element of cyber security management. Cyber criminals take over user computers by writing computer programs that “exploit” vulnerabilities in operating systems (Windows, Apple OS, etc) and application programs (Adobe Acrobat, Office, Flash, Java, etc). When software companies find a vulnerability, they usually issue an update patch to fix the code running in their customer’s computers.

Citadel publishes our Weekend Vulnerability and Patch Report to alert readers to some of the week’s important updates and vulnerabilities. Our focus is on software typically found in the small or home office (SOHO) or that users are likely to have on their home computer. The report is not intended to be a thorough listing of updates and vulnerabilities.

Copyright © 2017 Citadel Information Group. All rights reserved

The post Weekend Vulnerability and Patch Report, June 4, 2017 appeared first on Citadel Information Group.

Jeff Snyder’s, SecurityRecruiter.com, Jeff Snyder CoachingSecurity Recruiter Blog, 719.686.8810