Adobe sets Illustrator fix

Small and midsize companies tend not to check for NAS updates, so customers advised to patch right away.

Such lagging vulnerability remediation for ProxyLogon significantly contrasts patching activities for a pair of Ivanti flaws also leveraged in Salt Typhoon attacks, tracked as CVE-2023-46805 and CVE-2024-21887, which have been addressed in over 92% of affected Ivanti devices, findings from Tenable revealed.

Attacks with the chained vulnerabilities have been thwarted by three organizations, with the first preventing compromise following sysadmin identification of suspicious user accounts and the second averting the breach after an endpoint protection platform detected web shell-creating base64-encoded scripts, according to a joint CISA and FBI advisory.