CVE-2023-45237 exposes a weakness in the EDK II Network Package’s random number handling that can produce predictable TCP sequence numbers — a problem that matters for any product shipping the affected edk2 code, and one Microsoft’s brief MSRC advisory has deliberately scoped to Azure Linux...
Original release date: June 30, 2020
Summary
Cybersecurity and Infrastructure Security Agency (CISA) analysts have compiled the top detection signatures that have been the most active over the month of May in our national Intrusion Detection System (IDS), known as EINSTEIN. This information is...