Patch/Configuration Management

Experts warn teams to check their logs, as dormant backdoors are designed to survive patching.

SecurityWeek reports that widely used PDF platforms Apryse and Foxit have been impacted by 16 vulnerabilities that could be leveraged to facilitate account takeovers and data theft.

The Cybersecurity and Infrastructure Security Agency has included four flaws impacting the TeamT5 ThreatSonar Anti-Ransomware software, the Zimbra Collaboration Suite, the Microsoft Windows Video ActiveX Control utility, and Google Chrome in its Known Exploited Vulnerabilities list, The Hacker News reports.

The flaw is a stack buffer overflow that could lead to unauthenticated RCE with root privileges.

Google Mandiant warns to patch immediately because exploitation can weaken a team's ability to recover from a ransomware attack.

VulnCheck's platform aggregates data from vulnerability disclosures, exploit repositories, malware samples, and dark web forums.

The Microsoft Configuration Manager vulnerability, patched in 2024, could enable RCE.