Week in review: 10 cybersecurity frameworks you need to know, exploited Chrome zero-day fixed
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2023-22527 | Unauthenticated OGNL Template Injection RCE in Atlassian Confluence Data Center/Server | 9.8 | 100% | KEVRansomwarePoC ×2 | KEV |
| CVE-2023-34063 | Aria Automation contains a Missing Access Control vulnerability | 8.3 | <1% | ||
| CVE-2023-35082 | Authentication Bypass in Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core | 9.8 | 100% | KEVRansomware | KEV |
| CVE-2023-36025 | Windows SmartScreen Bypass (CVE-2023-36025) Exploited via Crafted Shortcut Files | 8.8 | 88% | KEV | KEV |
| CVE-2024-0519 | Out-of-Bounds Memory Access in Google Chrome/Chromium V8 (Actively Exploited) | 8.8 | 4% | KEV | KEV |
| CVE-2024-21591 | An Out-of-bounds Write vulnerability in J-Web of Juniper Networks Junos OS on SRX Series and EX Series allows an unauthenticated, network-based attacker to… | 9.8 | 18% | PoC |
From the original article
4 min read at helpnetsecurity.com
Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Key elements for a successful cyber risk management strategy In this Help Net Security interview, Yoav Nathaniel, CEO at Silk Security, discusses the evolution of cyber risk management strategies and practices, uncovering common mistakes and highlighting key components for successful risk resolution.
By @helpnetsecurity · helpnetsecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.