Weekly Security Roundup - Dec 17, 2023

This Week’s Updates

Apple has released backported software updates to fix security vulnerabilities on older iPhones, Apple Watches and Apple TVs

A critical vulnerability in Backup Migration plugin for Wordpress allows attackers to fully compromise affected sites

Microsoft released software updates as part of its December 2023 Patch Tuesday

Sophos released a security patch for end-of-life firewalls after discovering active exploitations

Americold, a cold storage and logistics business, has disclosed they were a victim of a ransomware attack

Valve has fixed a vulnerability in Counter-Strike 2 that exposed players' IP addresses

Hackers are exploiting a recently patched vulnerability in Apache Struts

Ubiquiti has fixed an issue with its UniFi cloud management portal that allowed users access to other users' accounts

York Region District School Board has said they were a victim of a cyber incident

3CX is warning customers to disable database integrations due to a vulnerability

Security researchers reveal a Mirai-based botnet is exploiting a vulnerability in QNAP VioStor NVR

MongoDB is warning that they were a victim of a cyber attack