Week in review: VMware ESXi zero-day exploited, SMS Stealer malware targeting Android users
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2023-45249 | Default-Password Remote Command Execution in Acronis Cyber Infrastructure | 9.8 | 53% | KEV | KEV |
| CVE-2024-37085 | Authentication Bypass in VMware ESXi via AD Group Recreation | 7.2 | 27% | KEVRansomware | KEV |
From the original article
6 min read at helpnetsecurity.com
Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Why a strong patch management strategy is essential for reducing business risk In this Help Net Security interview, Eran Livne, Senior Director of Product Management, Endpoint Remediation at Qualys and Thomas Scheffler, Security Operations Manager of Cintas Corporation, discuss their experiences with automated patch…
By @helpnetsecurity · helpnetsecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.