Saturday, March 18, 2023
  • Advertise With Us
  • Write For Us
  • Contact Us
  • About Us
  • Editorial Calendar
Download Latest Issue - Free!
The Cyber Express
Ransomware Report
  • MagazineDownload
  • Firewall Daily
    • All
    • Dark Web News
    • Data Breach News
    • Hacking News
    • Ransomware News
    • Vulnerabilities
    Gamekaking Data Breach

    Gamekaking Data Breach? Leakbase Claims to Upload 19 Million Rows of Stolen Information

    Medusa Ransomware Group

    Medusa Ransomware Group Targets National Institute of Ocean Technology

    BreachForums

    FBI Arrests BreachForums Operator ‘Pompompurin’, Slaps Cybercrime Charges

    Clop Ransomware Group Adds Hitachi Energy

    Hitachi Energy Confirms Security Incident After Clop Ransomware Adds it to Victim List

    Onex Data Exposed

    Onex Data Exposed, Linked to GoAnywhere MFT Security Incident

    Euler Finance Cyber Attack

    Euler Finance Cyber Attack Hackers Returns $165k to Victim

    Independent Living Systems Data Breach

    Independent Living Systems Data Breach Puts 4.2 Million Individuals at Risk

    Loyola University Data Breach

    Loyola University Data Breach, Hackers Claim to Have Access to Personal Student Data

    Pornhub

    Pornhub Removes Wagner Ad Recruiting Soldiers For Russian War

  • Essentials
    • All
    • Compliance
    • Governance
    • Policy Updates
    • Regulations
    BreachForums

    FBI Arrests BreachForums Operator ‘Pompompurin’, Slaps Cybercrime Charges

    Cybersecurity Excellence Awards

    Cybersecurity Excellence Awards: Cyble Rated Fastest Growing Cybersecurity Company

    Insider threat mitigation

    Behavioral Psychology, a Boon for Insider Risk Mitigation

    Safer Internet

    International Safer Internet Day: How Safe Are Our Teenagers Online?

    TRAI

    TRAI Asked to Involve MoD in Drafting Big Data Regulations & Policies

    cybersecurity

    Cybersecurity incidents may soon be ‘uninsurable’

    Australia

    Australia Ropes in Tech Veterans to Set Up Cyber Action Plan

    Active Directory

    Prevent Ransomware: Save the Active Directory

    Privacy Penalty Bill

    Privacy Penalty Bill: Australian Parliament Approves Heavy Fines

    • Regulations
    • Compliance
    • Governance
    • Policy Updates
  • Features
    • Cyber Warfare
    • Espionage
    • Workforce
      • Learning & Development
  • Business News
    • All
    • Appointments
    • Budgets
    • Mergers & Aquisitions
    • Partnerships
    • Press Release
    • Startups
    GISEC Global 2023

    GISEC Global 2023: Knowledge Sharing, Collaboration Vital to Fend off Cyberattacks, say Experts

    Call & Contact Center Expo 2023 Las Vegas

    Call & Contact Center Expo 2023 Las Vegas

    Former BookMyShow CTO Mahesh Vandi Chalil

    Cyble Appoints Former BookMyShow CTO Mahesh Vandi Chalil as Chief Product and Technology Officer

    GISEC 2023

    GISEC 2023: Microsoft Highlights Zero Trust Approach and Mixed Reality Policing Tools

    GISEC Global 2023

    GISEC Global 2023: ‘Take the Fight to Cyber Attackers’ Urges UAE Cybersecurity Council Paper

    Cyble in Forbes List

    Cyble Recognized by Forbes as One of America’s Best Startup Employers 2023

    Cybersecurity Excellence Awards

    Cybersecurity Excellence Awards: Cyble Rated Fastest Growing Cybersecurity Company

    Cyble Among Top 50 Emerging Companies

    Cyble Among Top 50 Emerging Companies Across Governance Risk & Compliance Solutions Sector

    Call and Contact Center Expo

    The Countdown Begins: The Call and Contact Center Expo Las Vegas 2023 is Officially Here!

    • Startups
    • Mergers & Aquisitions
    • Partnerships
    • Appointments
    • Budgets
    • Research
      • Whitepapers
      • Sponsored Content
      • Market Reports
    • Interviews
      • Podcast
  • EventsCyberCon
    •  Cyber Security Webinar
    • World CyberCon Middle East 2023
    • Endorsed Events
No Result
View All Result
The Cyber Express
  • MagazineDownload
  • Firewall Daily
    • All
    • Dark Web News
    • Data Breach News
    • Hacking News
    • Ransomware News
    • Vulnerabilities
    Gamekaking Data Breach

    Gamekaking Data Breach? Leakbase Claims to Upload 19 Million Rows of Stolen Information

    Medusa Ransomware Group

    Medusa Ransomware Group Targets National Institute of Ocean Technology

    BreachForums

    FBI Arrests BreachForums Operator ‘Pompompurin’, Slaps Cybercrime Charges

    Clop Ransomware Group Adds Hitachi Energy

    Hitachi Energy Confirms Security Incident After Clop Ransomware Adds it to Victim List

    Onex Data Exposed

    Onex Data Exposed, Linked to GoAnywhere MFT Security Incident

    Euler Finance Cyber Attack

    Euler Finance Cyber Attack Hackers Returns $165k to Victim

    Independent Living Systems Data Breach

    Independent Living Systems Data Breach Puts 4.2 Million Individuals at Risk

    Loyola University Data Breach

    Loyola University Data Breach, Hackers Claim to Have Access to Personal Student Data

    Pornhub

    Pornhub Removes Wagner Ad Recruiting Soldiers For Russian War

  • Essentials
    • All
    • Compliance
    • Governance
    • Policy Updates
    • Regulations
    BreachForums

    FBI Arrests BreachForums Operator ‘Pompompurin’, Slaps Cybercrime Charges

    Cybersecurity Excellence Awards

    Cybersecurity Excellence Awards: Cyble Rated Fastest Growing Cybersecurity Company

    Insider threat mitigation

    Behavioral Psychology, a Boon for Insider Risk Mitigation

    Safer Internet

    International Safer Internet Day: How Safe Are Our Teenagers Online?

    TRAI

    TRAI Asked to Involve MoD in Drafting Big Data Regulations & Policies

    cybersecurity

    Cybersecurity incidents may soon be ‘uninsurable’

    Australia

    Australia Ropes in Tech Veterans to Set Up Cyber Action Plan

    Active Directory

    Prevent Ransomware: Save the Active Directory

    Privacy Penalty Bill

    Privacy Penalty Bill: Australian Parliament Approves Heavy Fines

    • Regulations
    • Compliance
    • Governance
    • Policy Updates
  • Features
    • Cyber Warfare
    • Espionage
    • Workforce
      • Learning & Development
  • Business News
    • All
    • Appointments
    • Budgets
    • Mergers & Aquisitions
    • Partnerships
    • Press Release
    • Startups
    GISEC Global 2023

    GISEC Global 2023: Knowledge Sharing, Collaboration Vital to Fend off Cyberattacks, say Experts

    Call & Contact Center Expo 2023 Las Vegas

    Call & Contact Center Expo 2023 Las Vegas

    Former BookMyShow CTO Mahesh Vandi Chalil

    Cyble Appoints Former BookMyShow CTO Mahesh Vandi Chalil as Chief Product and Technology Officer

    GISEC 2023

    GISEC 2023: Microsoft Highlights Zero Trust Approach and Mixed Reality Policing Tools

    GISEC Global 2023

    GISEC Global 2023: ‘Take the Fight to Cyber Attackers’ Urges UAE Cybersecurity Council Paper

    Cyble in Forbes List

    Cyble Recognized by Forbes as One of America’s Best Startup Employers 2023

    Cybersecurity Excellence Awards

    Cybersecurity Excellence Awards: Cyble Rated Fastest Growing Cybersecurity Company

    Cyble Among Top 50 Emerging Companies

    Cyble Among Top 50 Emerging Companies Across Governance Risk & Compliance Solutions Sector

    Call and Contact Center Expo

    The Countdown Begins: The Call and Contact Center Expo Las Vegas 2023 is Officially Here!

    • Startups
    • Mergers & Aquisitions
    • Partnerships
    • Appointments
    • Budgets
    • Research
      • Whitepapers
      • Sponsored Content
      • Market Reports
    • Interviews
      • Podcast
  • EventsCyberCon
    •  Cyber Security Webinar
    • World CyberCon Middle East 2023
    • Endorsed Events
No Result
View All Result
The Cyber Express
No Result
View All Result
Home Firewall Daily

Dell Releases New Updates For Tackling CVE-2023-23698 Vulnerability

Vulnerability CVE-2023-23698 leaves the door open for a malicious local user to potentially wreak havoc by deleting arbitrary files

Ashish Khaitan by Ashish Khaitan
February 7, 2023
in Firewall Daily, Vulnerabilities
0
Dell Vulnerability
615
SHARES
3.4k
VIEWS
Share on LinkedInShare on Twitter
Listen to this story

American consumer technology company Dell has released a new update for its devices, especially for its Windows-based computers, which are currently facing a Windows universal application vulnerability. The update aims to protect those affected by the vulnerability and currently facing security issues.

According to Dell’s report, vulnerability CVE-2023-23698, referred to as an “Insecure Operation on Windows Junction,” leaves the door open for a malicious local user to potentially wreak havoc by deleting arbitrary files.

You might also like

Gamekaking Data Breach? Leakbase Claims to Upload 19 Million Rows of Stolen Information

Medusa Ransomware Group Targets National Institute of Ocean Technology

FBI Arrests BreachForums Operator ‘Pompompurin’, Slaps Cybercrime Charges

Vulnerability CVE-2023-23698 explained

The CVE-2023-23698 is one of the latest vulnerabilities found in Dell devices and directly affects Dell Command | Update, and Dell Update, Alienware Update. The Dell products affected by the vulnerability include Versions 4.6.0 and 4.7.1 and Versions 4.6.0 and 4.7.1.

The vulnerability was first discovered on January 17, 2023, and directly affected Dell Command | Update, and Dell Update, Alienware Update versions before 4.6.0 and 4.7.1.

These vulnerabilities could potentially allow a local malicious user to exploit Dell devices, potentially leading to arbitrary file deletion. In general, vulnerabilities in Dell devices can refer to security flaws or weaknesses in Dell hardware, software, or firmware that could allow attackers to gain unauthorized access, steal sensitive information, or cause harm to the device or network.

Users are advised to update the products to version 4.8.0. Dell has also shared links to the updates for both the products where users of Windows 10 32-bit and 64-bit can download the update to secure systems.

Dell, vulnerability, and patch management

To mitigate these risks, It is recommended to upgrade to the latest version for one’s devices and products with the latest security patches and to follow best practices for network security, such as using strong passwords and disabling unused services.

Keeping the operating system and all installed software up-to-date is important, so regularly checking for updates is advised.

Using a robust antivirus program protects against malicious software and malware. Enabling firewall protection on the computer is also recommended. Practicing safe browsing habits and avoiding downloading or executing unknown files is important.

Regularly backing up important data protects against loss in case of a security breach or system failure. Finally, staying informed about potential security threats and best practices for visiting safely online is crucial for one’s education and awareness. Moreover, following the manufacturer’s guidelines to address the issue and take necessary precautions to secure your device and data is recommended.

Vulnerability and timely patching

Poor patch management within companies is often due to several challenges, The Cyber Express reported earlier.

Employees are often inundated with a constant stream of patches that need to be installed. This can result in a backlog of updates that need to be prioritized based on the importance of the affected application and the gravity of the security vulnerability.

Moreover, the growth of remote work has resulted in more employees utilizing personal devices for work, which are more challenging to secure and keep updated.

Another hindrance is the lack of coordination among IT teams, each responsible for different tasks such as identifying vulnerabilities and applying patches, leading to disruptions in communication and workflow.

The patching process can also be hindered by slow and outdated change management procedures. Additionally, there is always the chance that the patches themselves may be faulty or compromised, requiring IT teams to thoroughly test and validate them before deployment.

Finally, many patch management processes are still performed manually, consuming a large amount of time and resources.

Share this:

  • Click to share on LinkedIn (Opens in new window)
  • Click to share on Reddit (Opens in new window)
  • Click to share on Twitter (Opens in new window)
  • Click to share on Facebook (Opens in new window)
  • More
  • Click to email a link to a friend (Opens in new window)
  • Click to share on WhatsApp (Opens in new window)

Related

Previous Post

Mirai to Medusa Botnet, Hackers Up Their Game to Launch Cyberattacks

Next Post

International Safer Internet Day: How Safe Are Our Teenagers Online?

Ashish Khaitan

Ashish Khaitan

Ashish is a technical writer at The Cyber Express. He adores writing about the latest technologies and covering the latest cybersecurity events. In his free time, he likes to play horror and open-world video games.

Related Posts

Gamekaking Data Breach
Dark Web News

Gamekaking Data Breach? Leakbase Claims to Upload 19 Million Rows of Stolen Information

by Ashish Khaitan
March 18, 2023
Medusa Ransomware Group
Data Breach News

Medusa Ransomware Group Targets National Institute of Ocean Technology

by Ashish Khaitan
March 18, 2023
BreachForums
Compliance

FBI Arrests BreachForums Operator ‘Pompompurin’, Slaps Cybercrime Charges

by Chandu Gopalakrishnan
March 18, 2023
Clop Ransomware Group Adds Hitachi Energy
Data Breach News

Hitachi Energy Confirms Security Incident After Clop Ransomware Adds it to Victim List

by Vishwa Pandagle
March 18, 2023
Onex Data Exposed
Data Breach News

Onex Data Exposed, Linked to GoAnywhere MFT Security Incident

by Vishwa Pandagle
March 17, 2023
Next Post
Safer Internet

International Safer Internet Day: How Safe Are Our Teenagers Online?

Latest Issue is Out. Subscribe Now

Women in Cybersecurity

Download Now

CRIL


Follow Us On Google News

Never miss an update. Subscribe!

* indicates required

Top 10 Cybersecurity Jobs

Categories

About The Cyber Express

The Cyber Express

Cyber Security News and Magazine

The Cyber Express is a handbook for all stakeholders of the internet that provides information security professionals with the latest news, updates and knowledge they need to combat cyber threats.

Follow The Cyber Express

Contact

For editorial queries: [email protected]

For marketing, PR & media partnerships: [email protected]

For media kit and digitals sales: [email protected]

For Sponsorship/Event Partnership: [email protected]

For Conferences related information: [email protected]

Our Address

We’re remote friendly, with office locations around the world:

San Francisco, Atlanta, Rome,
Dubai, Mumbai, Bangalore, Hyderabad,  Singapore, Jakarta, Sydney, and Melbourne

 

Headquarters:

The Cyber Express LLC
555 North Point Center E
Alpharetta, GA 30022, USA.

Tel: (678) 578-8838

Events: +1 (678) 578-4140

 

India Office:

Cyber Express Media Network
HD-021, 4th Floor, C Wing, Building No.4. Nesco IT Park, WE Highway, Goregaon East, Mumbai, Maharashtra, India – 4000063

Tel: (678) 578-8838

Events: +1 (678) 578-4140

Subscribe to Our Feed

RSS Feeds

Follow Us On Google News

© 2022 The Cyber Express (Cyber Security News and Magazine) | By Cyble Inc.

No Result
View All Result
  • Firewall Daily
  • Business News
  • Cyber Essentials
  • Features
  • Cyber Security Magazine
  • Events
    • World CyberCon Middle East 2023
    •  Cyber Security Webinar

© 2022 The Cyber Express (Cyber Security News and Magazine) | By Cyble Inc.

Welcome Back!

Login to your account below

Forgotten Password?

Retrieve your password

Please enter your username or email address to reset your password.

Log In

Add New Playlist

This website uses cookies. By continuing to use this website you are giving consent to cookies being used. Visit our Privacy and Cookie Policy.