The US-CERT Current Activity web page is a regularly updated summary of the most frequent, high-impact types of security incidents currently being reported to the US-CERT.
Apple Releases OS X 10.8.4 and Security Update 2013-002
Apple has released OS X 10.8.4 and Security Update 2013-002 to address multiple vulnerabilities. These vulnerabilities may allow an attacker to execute arbitrary code, obtain sensitive information, bypass security controls, or cause denial-of-service conditions.
US-CERT encourages users and administrators to review Apple Security article HT5784 and apply any necessary updates to help mitigate these risks.
Apple Releases Security Update for Safari on OS X
Apple has released security updates for Safari 6.0.5 to address multiple vulnerabilities. These vulnerabilities could allow a remote attacker to execute arbitrary code or cause a denial-of-service condition.
Safari 6.0.5 WebKit updates are available for the following versions:
- OS X Lion v10.7.5
- OS X Lion Server v10.7.5
- OS X Mountain Lion v10.8.3
US-CERT encourages users and administrators to review Apple Support Article HT5785 and follow best practice security policies to determine if their organization is affected and the appropriate response.
Google Releases Google Chrome 27.0.1453.110
Google has released Google Chrome 27.0.1453.110 for Windows, Macintosh, Linux and Chrome Frame to address multiple vulnerabilities. These vulnerabilities may allow a remote attacker to cause a denial-of-service condition, bypass security controls or execute arbitrary code.
US-CERT encourages users and administrators to review the Google Chrome Release blog entry and follow best practice security policies to determine which updates should be applied.
Pages
This product is provided subject to this Notification and this Privacy & Use policy.
Official website of the Department of Homeland Security