Patch/Configuration Management

Apache's open-source software utility collection Hadoop and open-source, unified stream-processing, and batch-processing framework Flink are being targeted in new malware attacks that involve packers and rootkits to evade detection, SiliconAngle reports.

Kyocera Device Manager instances impacted by the already patched path traversal vulnerability, tracked as CVE-2023-50916, could be targeted by threat actors to facilitate further malicious activity, including unauthorized account access and data exfiltration, reports The Hacker News.

Security pros noted that the first Patch Tuesday of 2024 was the second consecutive release by Microsoft with no zero-days.

Fixes have been released by QNAP to address 12 security flaws, many of which are high-severity, impacting its various products, according to SecurityWeek.

Some of the most dangerous vulnerabilities of 2023 make it to CISA's KEV list, including bugs in Apple and Apache products.

Security pros predict threat groups will continue to change their tactics as global law enforcement ramps up collaborating in the fight against ransomware other forms of cybercrime in the coming year.

Six security flaws in Google Chrome have been addressed as part of the browser's first security update this year, reports SecurityWeek.