Hello, welcome to the Wednesday, May 20th, 2020 edition of the Sands and its Storm Centers.

Stormcast, my name is Johannes Ulrich.

And today I'm recording from Jacksonville, Florida.

Rick noticed today some odd traffic, an odd spike-in traffic against Port 62,234. Haven't really explained what this is all

about, what attackers may be looking for here, but the number of sources scanning for this

particular port, well, still not amazingly big, but certainly a 3 to 400 range, has significantly

increased over the last day. So in particular, if you are seeing outbound traffic to port

62,234, let us know, and it would be nice to see what's causing this spike.

And Cisco released a number of updates today.

Nothing critical, only high in Cisco's rating.

Now, there is one vulnerability I want to draw a bit attention to, and this is a memory leak in the adaptive security or ASA appliance and firepower threat defense software.

The issue here is that an attacker could send a crafted get request to the web interface of the appliance

and receive memory content back. Now, Cisco points out that

each time that's being attempted, there may be different memory coming back and that the

memory may include authentication cookies. So depending on luck of the draw, I guess, this could certainly lead to a compromise of the appliance and something that you should watch out for.

And that's probably the vulnerability I would suggest here that you should use to justify patching.

The other vulnerabilities are for the most part denial of service vulnerabilities.

So yes, the rating of high is appropriate for those issues.

And of course, patching could result in the denial of service itself if something goes wrong.

And Google today released version 83 of Google Chrome, and well, they skipped actually version 82 due to COVID-19.

In addition to fixing a number of vulnerabilities in version 83, Google also adjusted some security features.

First of all, instead of just doing so a simple update check, there will be more a security review,

...