CERTs / CSIRTs

ESB-2023.3879 – [Apple iOS] iOS 16.5.1 and iPadOS 16.5.1: CVSS (Max): None [auscert.org.au]

by

—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.3879 Rapid Security Responses for iOS 16.5.1 and iPadOS 16.5.1 11 July 2023 =========================================================================== AusCERT Security Bulletin Summary ——————————— Product: iOS 16.5.1 and iPadOS 16.5.1 Publisher: Apple Operating System: Apple iOS Resolution: Patch/Upgrade CVE Names: CVE-2023-37450 Original Bulletin: https://support.apple.com/kb/HT213823 Comment: CVSS (Max): None … Read more

Communications Security Establishment (CSE) and international partners publish joint guide on secure-by-design and -default principles [cyber.gc.ca]

by

This joint guide on implementing secure by design and by default measures is the result of a collaborative effort by the cybersecurity authorities of five nations: Canada, Australia, New Zealand, the United Kingdom, and the United States, as well as Germany and the Netherlands. Source: Read More ​ Guidance, news and events

Defending against data exfiltration threats – ITSM.40.110 [cyber.gc.ca]

by

Data exfiltration attacks occur in various forms, including data espionage, user or system credentials theft, financial data theft, digital identity compromise, and data de-anonymization. To protect against these attacks, your organizations should secure your data lifecycle processes (e.g. creation, operation, and destruction) from end to end. In this document, we discuss some known data exfiltration … Read more

Top 10 IT security actions: No. 5 segment and separate information – ITSM.10.092 [cyber.gc.ca]

by

This document provides guidance on how you can segment your networks into various security zones. Network segmentation separates similar information technology (IT) assets, like hardware, software, and data, into logical groupings that have the same security policies and security requirements. Source: Read More ​ Guidance, news and events

Foundational cyber security actions for small organizations – ITSAP.10.300 [cyber.gc.ca]

by

In this publication, we summarize the foundational security actions you can take to begin building your cyber security resilience. These actions are a minimum set of practices that you can implement over time. You will find some additional recommendations on security actions that you can implement as your organizational resources and capacity increase. Source: Read … Read more

Learning Hub [cyber.gc.ca]

by

The Cyber Centre’s Learning Hub offers courses on basic, advanced and specialized topics in cyber security for employees of the Government of Canada and those who work on systems of importance to the Government of Canada. Source: Read More ​ Guidance, news and events

Obsolete products – ITSAP.00.095 [cyber.gc.ca]

by

It’s a good practice to discontinue the use of technologies once they are obsolete. However, realistically, organizations will need time to upgrade or replace IT assets. This document offers some guidance on how to minimize risks as your organization transitions away from obsolete products. Source: Read More ​ Guidance, news and events