NCSC advice following a security issue in the #3cx DesktopApp.
You may have seen reports that threat actors are actively exploiting a severe security issue in the 3CX DesktopApp.
Affected versions are:
18.12.407 and 18.12.416 for Windows platforms
18.11.1213, 18.12.402, 18.12.407 and 18.12.416 for MacOS
This correlates to Update 7 for Windows, and Updates 6 and 7 for MacOS.
The vendor 3CX has published a security alert which advises customers running affected versions to uninstall the software and use the browser-based web app (PWA) until a new version is available. Full instructions are provided.
The NCSC strongly advises all organisations running this software to consult the vendor advisory and take the recommended actions in it.
#3cx #security #vulnerabilty #exploit
Top 10 Web Application Security Risks - by #owasp #webapps #security #vulnerabilty #cybersecurity https://owasp.org/www-project-top-ten/
#owasp #webapps #security #vulnerabilty #cybersecurity
Guide to implementing a coordinated vulnerability disclosure process for open source projects - #openssf #ossf #security #vulnerabilty #cybersecurity https://github.com/ossf/oss-vulnerability-guide/blob/main/maintainer-guide.md#readme
#OpenSSF #ossf #security #vulnerabilty #cybersecurity
Für alle, die ihre esxi Server nicht patchen können oder wollen und trotzdem vor der aktuellen Schwachstelle geschützt sein wollen, empfiehlt VMware den SLP Dienst zu deaktivieren.
How to Disable/Enable the SLP Service on VMware ESXi (76372)
https://kb.vmware.com/s/article/76372
#esxi #vmware #vulnerabilty #hacker #schwachstelle #workaround
#workaround #schwachstelle #hacker #vulnerabilty #vmware #esxi
Für alle, die ihre esxi Server nicht patchen können oder wollen und trotzdem vor der aktuellen Schwachstelle geschützt sein wollen, empfiehlt VMWare den SLP Dienst zu deaktivieren.
How to Disable/Enable the SLP Service on VMware ESXi (76372)
https://kb.vmware.com/s/article/76372
#esxi #vmware #vulnerabilty #hacker #schwachstelle #workaround
#workaround #schwachstelle #hacker #vulnerabilty #vmware #esxi
@tailscale Thanks for the reports and thanks for being a good example of vulnerability sharing!
#security #tailscale #vulnerabilty #staysafe
Soll ich auf maustodon mehr Gedichte und Kunst und so Posten als früher auf Twitter? Thema #cringe neue #vulnerabilty und so
@jerry
I always setup 2FA on every site/account I can by default, but yikes. Signal boosting this #vulnerabilty for awareness
High‑impact UEFI vulnerabilities discovered (again) in over a hundred of models of Lenovo consumer laptops https://gadgeteer.co.za/high%e2%80%91impact-uefi-vulnerabilities-discovered-again-in-over-a-hundred-of-models-of-lenovo-consumer-laptops/
#backdoor #lenovo #security #technology #vulnerabilty
Oh my damn! Not good, not good at all! #lineageos #security #cracked #vulnerabilty
https://www.zdnet.com/article/hackers-breach-lineageos-servers-via-unpatched-vulnerability/
#lineageos #security #cracked #vulnerabilty