Patch/Configuration Management

As the industry relies more on open source software, it really needs to take a more proactive stance on patching vulnerabilities.

Exploitation attempts focused mostly on old local accounts with password-only authentication.

Intrusions infiltrating enterprise networks through Check Point Remote Access VPN instances are underway, according to BleepingComputer.

Security pros say because this bug was exploited in the wild, assume threat actors have launched remote code execution attacks.

GitLab has issued fixes for several security vulnerabilities through the latest versions of its Community Edition and Enterprise Edition software, BleepingComputer reports.

More than 200,000 Atlassian Confluence Data Center and Confluence Server instances could be compromised in intrusions targeting the high-severity remote code execution vulnerability, tracked as CVE-2024-21683, reports Cybernews.

The bug enables unauthenticated attackers to log into the Veeam Backup Enterprise Manager.

The move by Rockwell Automation was in response to heightened global tensions and concerns about potential attacks on critical infrastructure.