Mozilla Releases Security Updates for Firefox, Firefox ESR, and Thunderbird

Mozilla has released security updates to address vulnerabilities in Firefox, Firefox ESR, and Thunderbird. An attacker could exploit some of these vulnerabilities to take control of an affected system.   Therefore, Bhutan Computer Incident Response Team recommended users and administrators to review the Mozilla security advisories for Firefox 102, Firefox ESR 91.11, and Thunderbird 91.11 and 102 and apply the necessary updates....

Google Releases Security Updates

Google ha released Chrome version 103.0.5060.53 for windows,Mac and Linux.This version address vulnerabilities that an attacker could exploits to take control of an affected system. Therefore, Bhutan Computer Incident Response Team recommended users and administrators to review the Chrome Release Note and apply the necessary updates....

Advisory on Sophos Firewall critical vulnerability

A critical zero-day vulnerability (CVE-2022-1040) which was detected in March, 2022 in Sophos Firewall version 18.5.3 MR3 (18.5.3) and older is identified to have been exploited in the south asia region by some attacker group as per news reports. This authentication bypass vulnerability in the User Portal and Webadmin of the firewall can be exploited by a remote attacker to remotely execute arbitrary code.  In the investigation carried out by the Volexity threat research team on an unnamed organization, it was reported that the attacker first created a backdoor in Sophos Firewall, then a VPN account was created following...

Microsoft Releases June 2022 Security Updates

Microsoft has released updates to address multiple vulnerabilities in Microsoft software. An attacker can exploit some of these vulnerabilities to take control of an affected system. Therefore, Bhutan Computer Incident Response Team recommended  users and administrators to review Microsoft’s June 2022 Security Update Summary and Deployment Information and apply the necessary updates....