Google fixes 11 flaws in Chrome

Vulnerable TBK digital video recorders impacted by the command injection flaw, tracked as CVE-2024-3721, and Four-Faith routers affected by the operating system command injection issue, tracked as CVE-2024-12856, have been targeted by the novel RondoDox botnet for distributed denial-of-service attacks, The Hacker News reports.

Security pros advised to patch the bugs as CISA warns that they have been actively exploited.

Internet-exposed Java Debug Wire Protocol interfaces have been exploited by malicious actors to facilitate arbitrary code execution and cryptocurrency mining malware deployment on targeted systems, The Hacker News reports.