Members of public are advised to stay vigilant and not follow any instructions given by these scammers.

There are reports of an ongoing campaign to steal sensitive information from users of Chrome Browser Extensions. While there are no reports observed locally, users of affected extensions are advised to uninstall the affected extensions, reset account passwords, clear browser data and reset browser settings to their original defaults before installing a safe version of the extensions (if available).

The Apache Software Foundation has released security updates addressing critical vulnerabilities (CVE-2024-52046, CVE-2024-43441 and CVE-2024-45387) affecting various Apache products.

SingCERT's Security Bulletin summarises the list of vulnerabilities collated from the National Institute of Standards and Technology (NIST)'s National Vulnerability Database (NVD) in the past week.

SingCERT's Security Bulletin summarises the list of vulnerabilities collated from the National Institute of Standards and Technology (NIST)'s National Vulnerability Database (NVD) in the past week.

Apache has released security updates addressing a critical vulnerability (CVE-2024-53677) affecting their Struts 2 framework.

OpenWrt has released security updates addressing a critical vulnerability (CVE-2024-54143) affecting their Attended SysUpgrade (ASU) server.

SingCERT's Security Bulletin summarises the list of vulnerabilities collated from the National Institute of Standards and Technology (NIST)'s National Vulnerability Database (NVD) in the past week.

Ivanti has released security updates to address critical vulnerabilities (CVE-2024-11639, CVE-2024-11772 and CVE-2024-11773) affecting their Cloud Services Appliance (CSA) solution.

Microsoft has released security patches to address multiple vulnerabilities in their software and products.