Page 16 - Threat Intelligence Brief 7-10-2019_Neat

Threat Alerts

And Advisories

Microsoft Releases July 2019 Security Updates
Microsoft has released updates to address multiple vulnerabilities in Microsoft software. A remote
attacker could exploit some of these vulnerabilities to take control of an affected system. The
Cybersecurity and Infrastructure Security Agency (CISA) encourages users and administrators to
review Microsoft’s July 2019 Security Update Summary and Deployment Information and apply the
necessary updates.

Intel Releases Security Updates
Intel has released security updates to address vulnerabilities in Intel Solid State Drives for Data
Centers and Intel Processor Diagnostic Tool. An attacker could exploit these vulnerabilities to gain
an escalation of privileges on a previously infected machine. The Cybersecurity and Infrastructure
Security Agency (CISA) encourages users and administrators to review Intel Security Advisories
INTEL-SA-00267 and INTEL-SA-00268 and apply the necessary updates.

Mozilla Releases Security Updates for Firefox and Firefox ESR
Mozilla has released security updates to address vulnerabilities in Firefox and Firefox ESR. An
attacker could exploit some of these vulnerabilities to take control of an affected system. The
Cybersecurity and Infrastructure Security Agency (CISA) encourages users and administrators to
review the Mozilla Security Advisory for Firefox 68 and Firefox ESR 60.8 and apply the necessary
updates.

Adobe Releases Security Updates
0Adobe has released security updates to address vulnerabilities affecting Bridge CC, Experience
Manager, and Dreamweaver. An attacker could exploit one of these vulnerabilities to take control
of an affected system. The Cybersecurity and Infrastructure Security Agency (CISA) encourages
users and administrators to review Adobe Security Bulletins APSB19-37, APSB19-38, and APSB19-40
and apply the necessary updates.

Privacy and Mobile Device Apps
What are the risks associated with mobile device apps?
Applications (apps) on your smartphone or other mobile devices can be convenient tools to access
the news, get directions, pick up a ride share, or play games. But these tools can also put your
privacy at risk. When you download an app, it may ask for permission to access personal
information—such as email contacts, calendar inputs, call logs, and location data—from your
device. Apps may gather this information for legitimate purposes—for example, a ride-share app
will need your location data in order to pick you up. However, you should be aware that app
developers will have access to this information and may share it with third parties, such as
companies who develop targeted ads based on your location and interests.

www.accumepartners.com 16