Adobe has released security updates to address vulnerabilities in multiple Adobe products. An attacker could exploit some of these vulnerabilities to take control of an affected system. Therefore, Bhutan Computer Incident Response Team recommends users and administrators to review the following Adobe Security Bulletins and apply the necessary updates. Download Manager APSB20-49 ColdFusion APSB20-43 Genuine Service APSB20-42 Media Encoder APSB20-36 Creative Cloud Desktop Application APSB20-33...
Apache Releases Security Advisory for Apache Tomcat
The Apache Software Foundation has released security advisories to address multiple vulnerabilities in Apache Tomcat. An attacker could exploit these vulnerabilities to cause a denial-of-service condition. Therefore, Bhutan Computer Incident Response Team recommends users and administrators to review the Apache security advisories for CVE-2020-13934 and CVE-2020-13935 and upgrade to the appropriate version....
Mozilla Releases Security Updates
Mozilla has released security updates to address vulnerabilities in Firefox and Firefox ESR. An attacker could exploit some of these vulnerabilities to take control of an affected system. TTherefore, Bhutan Computer Incident Response Team recommends users and administrators to review the Mozilla Security Advisories for Firefox 78 and Firefox ESR 68.10 and apply the necessary updates....
Microsoft Releases Security Updates for Window 10
Microsoft has released security updates to address vulnerabilities in Windows 10 and Windows Server. These vulnerabilities could allow a remote attacker to take control of an affected system. Therefore, Bhutan Computer Incident Response Team recommends users and administrators to review the Microsoft security advisories for CVE-2020-1425 and CVE-2020-1457 and apply the necessary updates....
Courier/Parcel Scam
BtCIRT has come to notice of Courier/Parcel Scam where the scammer calls you to inform, about your pending parcel that needs to be cleared with some charges. The tracking number and the website provided by the scammer appears almost genuine. The scammer tries to lure you saying the packet contains money or other valuable items. Please be aware of such scams and do not fall into this scammer’s trap. Here’s some screenshots: The website used in this scam is https://royalexpresscr.com/ ...