Patch/Configuration Management

All NVIDIA Container Toolkit versions up to 1.16.1 and GPU Operator instances up to version 24.6.1 are impacted by the flaw, which stems from the absence of secure containerized GPU isolation from the host that exposes sensitive host file system and access runtime resources to inter-process communication.

Four vulnerabilities in the Common Unix Printing System (CUPS) could allow for RCE.

Attackers can remotely add rogue admin accounts using the authentication bypass flaw.

More significant of the two is a high-severity issue in file operations management during detected file removals in ESET's Windows antivirus, server security, and internet security products, tracked as CVE-2024-7400.

Security pros say teams should prioritize these two bugs because they potentially affect a wide range of IoT-based products.

The misconfiguration revealed more than 106 million records with U.S. citizens' private information and over 2.3 million MC2 Data subscribers' data.

Security tools from Crowdstrike, SentinelOne and Microsoft affected by latest Apple update.