Patch/Configuration Management

Researchers with Cloudflare say a newly disclosed vulnerability comes under attack every 22 minutes on average.

While Microsoft dubbed the flaw as a high-severity spoofing bug, such an issue was disclosed by ZDI to be a remote code execution vulnerability that requires a higher severity rating.

CVE-2024-6385, like another bug patched last month, could allow attackers to run pipelines as any user.

Microsoft’s notorious Internet Explorer has been brought out of retirement by threat actors using its security holes to serve malware.

Akamai researchers say its honeypots found numerous attempts to exploit recently disclosed vulnerability.

GitLab has issued a fix for the critical flaw in GitLab Community Edition and Enterprise Edition software, tracked as CVE-2024-6385, which could be leveraged for arbitrary pipeline job execution.