Week in review: New Black Basta's social engineering campaign, passing the CISSP exam in 6 weeks
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2024-23296 | Kernel Memory Corruption in Apple iOS, iPadOS, macOS, tvOS, watchOS, visionOS | 7.8 | 1% | KEV | KEV |
| CVE-2024-27852 | A privacy issue was addressed with improved client ID handling for alternative app marketplaces | 6.5 | <1% | ||
| CVE-2024-30040 | Actively Exploited Security Feature Bypass in Microsoft Windows MSHTML Platform | 8.8 | 4% | KEV | KEV |
| CVE-2024-30051 | Elevation of Privilege in Microsoft Windows DWM Core Library (Actively Exploited) | 7.8 | 6% | KEVRansomware | KEV |
| CVE-2024-32002 | Git: 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and 2.39.4, repositories with submodules can be crafted in a way that exploits a bug in… | 9.0 | 29% | ||
| CVE-2024-4947 | V8 Type Confusion in Google Chrome Actively Exploited by Lazarus Group | 9.6 | 15% | KEVPoC | KEV |
From the original article
5 min read at helpnetsecurity.com
Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Black Basta target orgs with new social engineering campaign Black Basta, one of the most prolific ransomware-as-a-service operators, is trying out a combination of email DDoS and vishing to get employees to download remote access tools.
By @helpnetsecurity · helpnetsecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.