Page 19 - Threat Intelligence 11-27-2019

Threat Alerts

And Advisories

Microsoft Releases Outlook for Android Security Update
Microsoft has released an update to address a vulnerability in Outlook for Android. An attacker could
exploit this vulnerability to take control of an affected system.The Cybersecurity and Infrastructure Se
curity Agency (CISA) encourages users and administrators to review the Microsoft Security Advisory and
apply the necessary update.

NSA Releases Cyber Advisory: Managing Risk from Transport Layer Security Inspection
The National Security Agency (NSA) has released a Cyber Advisory that addresses managing risk from
Transport Layer Security Inspection (TLSI). This short, informative document defines TLSI (a security
process that allows incoming traffic to be decrypted, inspected, and re-encrypted), explains some risks
and associated challenges, and discusses mitigations. The Cybersecurity and Infrastructure Security
Agency (CISA) encourages users and administrators to review the NSA Cyber Advisory and apply the
information, as appropriate. See CISA’s Alert on risks associated with HTTPS inspection.

FTC Provides Tips on Safeguarding Data Before Upgrading Mobile Phones
The Federal Trade Commission (FTC) has released an article with tips on how to protect personal
information before trading in a mobile phone for a newer model. FTC recommends the following four
steps to safeguard these devices:
• Back up data.
• Remove SIM and SD cards.
• Erase personal information.
• Verify deletion of personal information.
The Cybersecurity and Infrastructure Security Agency (CISA) encourages consumers to review the FTC
article for additional resources on how to perform each of the suggested steps and see CISA’s Tip on
Proper Disposal of Electronic Devices for more information.

Google Releases Security Updates for Chrome
Google has released Chrome 78.0.3904.108 for Windows, Mac, and Linux. This version addresses
vulnerabilities that an attacker could exploit to take control of an affected system. The Cybersecurity and
Infrastructure Security Agency (CISA) encourages users and administrators to review the Chrome Release
and apply the necessary updates.

www.accumepartners.com
16