Tanzania Computer Emergency Response Team

VMware has released security advisory to address multiple vulnerabilities in vCenter Server Appliance, vCenter Server and ESXi. Exploitation of these vulnerabilities may allow remote attacker to perform man-in-the-middle or cross-site scripting attacks. Users and administrators are encouraged to review the VMware Security Advisory and apply the necessary updates.

IBM has released security update to address vulnerability in Tivoli Endpoint Manager Mobile Device Management (MDM). This vulnerability may allow a remote attacker to gain control of an affected system. Users and administrators are encouraged to review the IBM Security Bulletin and apply the necessary updates.

WordPress 4.0.1 has been released to address multiple vulnerabilities, one of which could potentially allow a site to be compromised by a remote attacker. Users and administrators are encouraged to review the WordPress security released and apply the necessary updates.

Google has released Chrome 39.0.2171.65 for Windows, Mac and Linux; security updates to address vulnerability in Chrome. This update addresses the vulnerabilities that could cause denial of service condition. Users and administrators are encouraged to review the Google Chrome release blog and apply the necessary updates.

Microsoft has released updates to address vulnerabilities in Microsoft Windows, Office, Exchange, SharePoint, .NET Framework and Internet Explorer. These updates address vulnerabilities that could allow remote code execute, elevation of privilege or denial of service. Users and administrators are encouraged to review the Microsoft Security Bulletin and apply the necessary …

Adobe has released security updates for Adobe Flash Player. These updates address multiple vulnerabilities one of which can potentially allow an attacker to take control of the system. Users and administrators are encouraged to review the Adobe Security Bulletin and apply the necessary updates.

Apple has released a security updates to address multiple vulnerabilities in iOS devices, OS X Yosemite and Apple TV. To address vulnerabilities that can allow remote attackers to execute arbitrary commands. Updates available include: iOS 8.1.1 for iPhone 4s and later, iPod touch 5th generation and later, and iPad 2 …

Microsoft has released a security advisory to address unpatched vulnerability that affecting all supported releases of Microsoft Windows, excluding Windows Server 2003. These updates address the vulnerability that could allow remote code execution if a user opens a crafted Microsoft Office file that contains an OLE object. Users and administrators …

Cybercriminals are using Ebola virus epidemic as social engineering theme to circulate Malware and performing Phishing activities. Symantec has observed three malware operations and a phishing campaign using the Ebola virus as a social engineering theme. Attackers may use these Phishing emails that contain links that direct users to websites …

OpenSSL has released update patching vulnerabilities. These updates address vulnerabilities that could potentially allow an attacker to cause a Denial of Service (DoS) condition or execute man-in-the-middle attacks. The following updates are available: OpenSSL 1.0.1 users should upgrade to 1.0.1j OpenSSL 1.0.0 users should upgrade to 1.0.0o OpenSSL 0.9.8 users …