vulnerabilities
CVE-2024-4879 (CVSS 9.8) lets “an unauthenticated user remotely execute code” -- ServiceNow swiftly pushed fix to hosted instances but those self-hosting must...
Cisco says 42 products confirmed exposed to CVE-2024-6387 -- but OpenSSH exploit is malicious: Beware bogus POCs says Kaspersky
RHEL 9 affected, Debian, Ubuntu, SUSE push fixes
Fix up, look sharp: Uncle Sam is running out of patience with tech firms shipping insecure software. Vendors? Get familiar with the phrase "query parameterization"...
"A Vulnerability Operations Centre (VOC) approach can work wonders here..."
256,000 devices believed publicly exposed. But are MSMQ bugs really attacked in the wild?
"It is important that organizations practice the ‘assume breach’ principle..." YARA rules, hashes etc. available for defenders.
“CVE-2024-28995 is not known to be exploited in the wild as of 9 AM ET on June 11. We expect this to change."
