Weekly briefing

Week 39 · 25 Sep – 1 Oct 2023 UTC · assess the changes, then plan the next dates.

All dated changes in this period

6 source records · 3 groups

Oct 2023

Updates and guidanceDefender2 source records

Product news · 2 entries

Create and manage simulations using the Graph API in Attack simulation training.
Product news · Microsoft Defender for Office 365 what's new
Exchange Online permission management in Defender for Office 365 is now supported in Microsoft Defender unified role-based access control (RBAC)
Product news · Microsoft Defender for Office 365 what's new

28 Sep 2023

SecurityGitLab

GitLab Security Release: 16.4.1, 16.3.5, and 16.2.8

Security advisory · GitLab patch releases

25 Sep 2023

SecurityiOS and iPadOS / macOS3 source records

Apple · exploited, added to CISA KEV · 3 entries

Apple Multiple Products Improper Certificate Validation Vulnerability
Apple · exploited, added to CISA KEV
CVE-2023-41991
Assessment context
CISA lists it as exploited
Apple Multiple Products Kernel Privilege Escalation Vulnerability
Apple · exploited, added to CISA KEV
CVE-2023-41992
Assessment context
CISA lists it as exploited
Apple Multiple Products WebKit Code Execution Vulnerability
Apple · exploited, added to CISA KEV
CVE-2023-41993
Assessment context
CISA lists it as exploited

Groups collect records about the same product or named security topic on one UTC date. Open a record for its source and history; grouping alone does not establish a shared cause or impact.