Week in review: 18 free Microsoft Azure cybersecurity resources, K8 vulnerability allows RCE
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
CVE-2023-3676+1 related CVE | A security issue was discovered in Kubernetes where a user that can create pods on Windows nodes may be able to escalate to admin privileges on those nodes | 8.8 | 13% | PoC | |
| CVE-2023-3893 | A security issue was discovered in Kubernetes where a user that can create pods on Windows nodes running kubernetes-csi-proxy may be able to escalate to admin… | 8.8 | 3% | ||
| CVE-2023-4047 | A bug in popup notifications delay calculation could have made it possible for an attacker to trick a user into granting permissions | 8.8 | <1% | ||
| CVE-2023-41179 | Arbitrary command execution in Trend Micro Apex One and Worry-Free Business Security | 7.2 | 4% | KEV | KEV |
CVE-2023-41993+2 related CVEs | WebKit Code Execution Flaw in Apple iOS, iPadOS, macOS, and Safari | 8.8 group max | 24% | KEV | KEV |
| CVE-2023-5009 | An issue has been discovered in GitLab EE affecting all versions starting from 13.12 before 16.2.7, all versions starting from 16.3 before 16.3.4 | 9.8 | 8% |
From the original article
5 min read at helpnetsecurity.com
Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: LLM Guard: Open-source toolkit for securing Large Language Models LLM Guard is a toolkit designed to fortify the security of Large Language Models (LLMs). It is designed for easy integration and deployment in production environments.
By @helpnetsecurity · helpnetsecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.