Patch/Configuration Management

Security pros say given the complexity of SAN management tools, it’s understandable the patches took so long.

Security pros say there’s a high potential that attackers could launch arbitrary code execution.

Proof-of-concept exploits for CVE-2024-3400 are now publicly available.

Attackers exploited a critical vulnerability to create a new administrator account.

Security updates have been issued by Ivanti to address 27 issues impacting its Avalanche mobile device management solution, according to BleepingComputer.

SecurityWeek reports that more than 100 security vulnerabilities affecting several Juniper Networks products have been patched as part of dozens of advisories issued by the firm last week.

The vulnerability is due to a “dangerous nodejs configuration” and has a CVSS score of 9.4.