Active Directory Health Check using Microsoft Entra Connect Health Service
Community post · Evotec (Przemysław Kłys)
Weekly briefing
Week 40 · 2 Oct – 8 Oct 2023 UTC · assess the changes, then plan the next dates.
All dated changes in this period
8 source records · 8 groupsSecurityAtlassian Jira and Confluence
Atlassian Confluence Data Center and Server Broken Access Control Vulnerability
Atlassian · exploited, added to CISA KEV
CVE-2023-22515
Assessment context
CISA lists it as exploited, including by ransomware
SecurityiOS and iPadOS
Apple iOS and iPadOS Kernel Privilege Escalation Vulnerability
Apple · exploited, added to CISA KEV
CVE-2023-42824
Assessment context
CISA lists it as exploited
SecurityWindows
Microsoft Windows CNG Key Isolation Service Privilege Escalation Vulnerability
Added to CISA KEV
CVE-2023-28229
Assessment context
CISA lists it as exploited
ReleasesPSReadLine
PSReadLine 2.3.4
Tool release · PSReadLine releases
Assessment context
3 release-note bullets
- Choose the inline prediction color based on the environment (#3808)
- Update the stable version of PSReadLine used in the auto triage messages (#3804)
- Update Compliance_Job to add a new variable group for APIScan (#3803)
SecurityMicrosoft 365 Apps
Microsoft Word Information Disclosure Vulnerability
CISA KEV deadline
CVE-2023-36761
Assessment context
CISA deadline passed 1118 days ago
SecurityMicrosoft Streaming Service Proxy Privilege Escalation Vulnerability
Microsoft Streaming Service Proxy Privilege Escalation Vulnerability
CISA KEV deadline
CVE-2023-36802
Assessment context
CISA deadline passed 1118 days ago
SecurityGoogle Chrome
Google Chromium libvpx Heap Buffer Overflow Vulnerability
Google · exploited, added to CISA KEV
CVE-2023-5217
Assessment context
CISA lists it as exploited
Groups collect records about the same product or named security topic on one UTC date. Open a record for its source and history; grouping alone does not establish a shared cause or impact.