btb_morrow

Senior Analyst @thebtbgroup

[btb_morrow @btb_morrow]

Path Traversal and Remote Code Execution in vulnerable versions of Apache are actively being scanned for. Updates from Apache should be applied as soon as possible.

Read More: https://t.co/XgWu2RoTlQ

#btbalert

[btb_morrow @btb_morrow]

VMware has announced various critical and important vulnerabilities in VMware vCenter Servers, one of which allows for code execution via uploaded files. Information, as well as updates and workarounds, can be seen here.

https://t.co/XOTcsAAa2I

#btbalert

[btb_morrow @btb_morrow]

One more reason not to open random email attachments! Microsoft announced CVE-2021-40444 which allows for remote code execution via ActiveX controls placed in specially-crafted Microsoft Office documents.

Read More: https://t.co/KKEpQufliZ

#btbalert

[btb_morrow @btb_morrow]

F5 released an August security advisory that includes a high-risk CVE-2021-23031 affecting BIG-IP Advanced WAF and ASM products. Check if your infrastructure is affected, more details can be found at: https://t.co/h0jTAfykV0

#btbalert