Patch/Configuration Management

Such a database not only contained Wi-Fi network names and credentials, device IDs, IP addresses, and email addresses but also other sensitive logging, monitoring, and error records for IoT devices around the world, according to an investigation by cybersecurity researcher Jeremy Fowler published on vpnMentor.

After being exploited in Chinese cyberattacks since October 2023, the ThinkPHP Framework local file inclusion flaw, tracked as CVE-2022-47945, has been targeted by 572 unique IP addresses, according to an analysis from GreyNoise.

By looking at bugs for asset importance, severity, threat activity, and network exposure, teams can set priorities and take targeted actions.

The flaws could enable remote code execution or arbitrary file writing and should be patched immediately.

Potential intrusions commence with the delivery of a specially crafted session cookie with a base64-encoded null bytes string to the '/cgi-bin/sslvpnclient' SSL VPN authentication endpoint, prompting an improper session validation that logs out firewall users and enables attacker session hijacking, a report from Bishop Fox revealed.

The 56 security vulnerabilities Microsoft addressed with its latest Patch Tuesday update includes two zero-day flaws.

Iran accounted for most of the vulnerable KerioControl instances, followed by the U.S., Italy, Germany, and Russia, according to The Shadowserver Foundation.