article thumbnail

Microsoft’s October 2023 Patch Tuesday Addresses 103 CVEs (CVE-2023-36563, CVE-2023-41763)

Tenable

We omitted CVE-2023-44487 from our counts as this vulnerability was reported to MITRE and not Microsoft and does not exclusively affect Microsoft products. It was exploited in the wild as a zero-day and was publicly disclosed prior to the October 2023 Patch Tuesday release. Details about this flaw are included in our analysis below.

Windows 115
article thumbnail

Tenable OT Security: 2023 Year in Review

Tenable

As we reflect on the many accomplishments Tenable OT Security achieved in 2023, one thing is clear: we couldn’t have done it without the support and collaboration of our customers and partners. As we bid farewell to 2023, these end-of-year days are a perfect opportunity to look back and summarize this incredible year. Happy New Year.

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

CVE-2023-40044, CVE-2023-42657: Progress Software Patches Multiple Vulnerabilities in WS_FTP Server

Tenable

Of the eight vulnerabilities, two are rated as critical: CVE Description Vendor Assigned CVSSv3 VPR* Severity CVE-2023-40044 WS_FTP.NET Deserialization Vulnerability in Ad Hoc Transfer Module 10.0 Critical CVE-2023-42657 WS_FTP Directory Traversal Vulnerability 9.9 High CVE-2023-40046 WS_FTP SQL Injection Vulnerability 8.2

article thumbnail

CVE-2023-41064, CVE-2023-4863, CVE-2023-5129: Frequently Asked Questions for ImageIO and WebP/libwebp Zero-Day Vulnerabilities

Tenable

Background The Tenable Security Response Team has put together this blog to answer frequently asked questions (FAQ) to help provide clarity around recently disclosed vulnerabilities including CVE-2023-41064, CVE-2023-4863 and CVE-2023-5129 in an open source library called libwebp. Did Google also patch this vulnerability?

article thumbnail

Microsoft’s December 2023 Patch Tuesday Addresses 33 CVEs (CVE-2023-36019)

Tenable

4 Critical 29 Important 0 Moderate 0 Low Microsoft addresses 33 CVEs in its December 2023 Patch Tuesday release, with no zero-day vulnerabilities disclosed this month. Microsoft patched 33 CVEs in its December 2023 Patch Tuesday release, with four rated critical and 29 rated as important. It was assigned a CVSSv3 score of 9.6

Windows 113
article thumbnail

GitHub Universe 2023 Insights

Xebia

This is a great extension point for me, as you can add your own systems to the chat interface. Copilot Enterprise Imagine having an AI that not only reviews code but also generates documentation and summarizes pull requests tailored to your organization’s style—this is the promise of Copilot Enterprise.

article thumbnail

CVE-2023-4966 (CitrixBleed): Invalidate Active or Persistent Sessions To Prevent Further Compromise

Tenable

Tenable Research has published two blogs on CitrixBleed, our initial analysis of the vulnerability as well as a Frequently Asked Questions (FAQ) blog providing added context surrounding the in-the-wild exploitation by threat actors including multiple ransomware groups. ransomware group in their exploitation of CitrixBleed.