Cyware Daily Threat Intelligence March 30, 2018

Security updates for iOS 11
Security updates for iOS, watchOS, tvOS, and Xcode have been released by Apple. These updates contain patches for privilege escalation, remote code execution, and information disclosure vulnerabilities. Patches for flaws in Safari and WebKit are also included in these updates.

Flaws in MicroLogix 1400 PLCs
Multiple critical vulnerabilities have been discovered in Allen-Bradley MicroLogix 1400 programmable logic controllers (PLCs). Attackers can leverage these flaws to modify configuration and ladder logic. Hackers can exploit these to obtain sensitive data by sending specially crafted packets.

Cisco patches three critical bugs
Three critical flaws in IOS and IOS XE software have been patched by Cisco. The company also provided security updates for 19 high severity flaws. The three critical flaws included CVE-2018-0151, a remote code execution flaw; CVE-2018-171, a flaw in IOS/IOS XE's smart install feature; and CVE-2018-0150, a flaw that affects IOS XE Release 16.x.