Network Security News Summary for Friday September 24th, 2021
Channel: Internet Storm Center Stormcast
Date: 2021-09-23

Obfuscated MSHTML Exploits; Exchange Autodiscovery Leak; Nagios Vuln; Apple SDK Removes TLS1.0/1.1

An XML-Obfustcated Office Document (CVE-2021-40444)
 https://isc.sans.edu/forums/diary/An+XMLObfuscated+Office+Document+CVE202140444/27860/

Exchange Autodiscovering Leaks Credentials
 https://www.guardicore.com/labs/autodiscovering-the-great-leak/

Nagios Vulnerabilities
 https://claroty.com/2021/09/21/blog-research-securing-network-management-systems-nagios-xi/

Apple Deprecating TLS 1.0/1.1
 https://developer.apple.com/news/?id=bv8ur34d

keywords: nagios; exchange; autodiscovery; xml; office; mshtml; word