Patch/Configuration Management

Multiple threat actors have begun exploiting one of four recently discovered flaws afflicting the vendor’s VPN and network gateway products.

Mastodon account hijacking possible with critical bug Accounts in the decentralized social networking platform Mastodon could be remotely impersonated and taken over through the exploitation of a new critical origin validation error vulnerability, tracked as CVE-2024-23832, The Hacker News reports.

CISA urges federal and private-sector organizations to disconnect Ivanti VPNs vulnerable to zero-day flaws.

Numerous security issues impacting Juniper Networks' Junos OS and its J-Web configuration interface leveraged by its EX switches and SRX firewalls have been resolved as part of recently issued updates, reports SecurityWeek.

BleepingComputer reports that the White Phoenix ransomware decryption tool has been made available on the web by CyberArk to ease the recovery from attacks involving ransomware strains with intermittent encryption, such as ALPHV/BlackCat, BianLian, DarkBit, Agenda/Qilin, and Play, months after the decryptor was released as a Python project on GitHub.

CVE-2024-0402, CVSS score 9.9, may affect more than 4,800 unpatched GitLab servers.

Mandiant and CISA say security teams should prioritize the bugs as Ivanti released patches Jan. 31.

Fortra recommends security teams patch critical CVE immediately. Security pros say hackers with even moderate skills can exploit bug.