H-ISAC: White Reports

H-ISAC: White Reports
H-ISAC: White Reports

ASD’s ACSC, CISA, FBI, NSA, and International Partners Release Guidance on Principles of OT Cybersecurity for Critical Infrastructure Organizations

This guidance provides critical information on creating and maintaining a safe, secure operational technology (OT) environment.
H-ISAC: White Reports
H-ISAC: White Reports

H-ISAC TLP White Finished Intelligence Report: HC3 Analyst Note: Malvertising in Healthcare September 26, 2024
Malvertising is a cyberattack method where legitimate advertising networks are infiltrated with malicious advertisements.
H-ISAC: White Reports
H-ISAC: White Reports

H-ISAC TLP White: Threat Bulletin: Critical Flaw in Ivanti’s Cloud Services Appliance (CSA) is Being Exploited
On September 19, 2024, Ivanti disclosed a critical vulnerability, CVE-2024-8963, in its Cloud Services Appliance (CSA), which is being exploited in targeted attacks.
H-ISAC: White Reports
H-ISAC: White Reports

H-ISAC TLP Green Vulnerability Bulletin: Patches Released for Vulnerabilities Affecting VMware Products

Broadcom released an advisory (VMSA-2024-0019) to address a pair of vulnerabilities affecting VMware vCenter Server and VMware Cloud Foundation.
H-ISAC: White Reports
H-ISAC: White Reports

H-ISAC TLP White Vulnerability Bulletin: Patches Released for High-Severity Vulnerability Affecting Spring Framework

Spring Framework recently disseminated a security advisory to address a path traversal vulnerability, tracked as CVE-2024-38816, in functional web frameworks.
H-ISAC: White Reports
H-ISAC: White Reports

HC3 Monthly Cybersecurity Vulnerability Bulletin August Vulnerabilities of Interest to The Health Sector
August Vulnerabilities of Interest to the Health Sector In August 2024, vulnerabilities to the health sector have been released that require attention.
H-ISAC: White Reports
H-ISAC: White Reports

H-ISAC TLP White: Vulnerability Bulletin: Cisco Addressed Nine Vulnerabilities Affecting Multiple Products

On September 11, 2024, Cisco issued advisories disclosing vulnerabilities affecting multiple products, including Cisco IOS XR Software, Crosswork Network Services Orchestrator (NSO), Optical Site Manager, and RV340 Dual WAN Gigabit VPN Routers.
H-ISAC: White Reports
H-ISAC: White Reports

H-ISAC TLP White Fortinet Discloses Third-Party Data Breach – Sept 12, 2024
Fortinet has experienced a third-party data breach affecting customers in the Asia-Pacific region.
H-ISAC: White Reports
H-ISAC: White Reports

H-ISAC TLP White: Vulnerability Bulletin: Green Batch of Critical Vulnerabilities in Progress WhatsUp Gold

Progress Software disclosed a batch of critical vulnerabilities affecting WhatsUp Gold.
H-ISAC: White Reports
H-ISAC: White Reports

H-ISAC TLP White Vulnerability Bulletin: Critical Microsoft Copilot Studio Vulnerability Exposes Sensitive Data

On August 20, 2024, Tenable Security published a blog post regarding a critical vulnerability affecting Microsoft Copilot Studio.
Subscribe to H-ISAC: White Reports