Week in review: Attackers use phishing emails to steal NTLM hashes, Patch Tuesday forecast
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2024-20337 | A vulnerability in the SAML authentication process of Cisco Secure Client could allow an unauthenticated, remote attacker to conduct a carriage return line… | 8.2 | 31% | ||
| CVE-2024-22252 | VMware ESXi, Workstation, and Fusion contain a use-after-free vulnerability in the XHCI USB controller | 6.7 | 4% | ||
CVE-2024-22254+2 related CVEs | VMware ESXi contains an out-of-bounds write vulnerability | 8.2 group max | <1% | ||
CVE-2024-23225+1 related CVE | Memory Corruption Kernel Protection Bypass in Apple iOS, macOS, tvOS, visionOS | 7.8 | 1% | KEV | KEV |
CVE-2024-27198+1 related CVE | Authentication Bypass in JetBrains TeamCity CI/CD Server | 9.8 group max | 100% | KEVRansomware | KEV |
From the original article
5 min read at helpnetsecurity.com
Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: What organizations need to know about the Digital Operational Resilience Act (DORA) In this Help Net Security interview, Kris Lovejoy, Global Security and Resilience Leader at Kyndryl, discusses the impact of the Digital Operational Resilience Act (DORA) on organizations across the EU, particularly in ICT risk…
By @helpnetsecurity · helpnetsecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.