Patch/Configuration Management

Doug and the Security Weekly crew talk about vulnerabilities, are we patching the right things? This is the burning question. We will try to answer it. Segment Resources: https://blog.sonicwall.com/en-us/2024/04/patch-tuesday-which-vulnerabilities-really-need-prioritizing/

Attackers looking to leverage the security issue could do so remotely through the delivery of a crafted GET request to an impacted Splunk instance with activated Splunk Web.

Here’s seven tips that offer short-term and long-term fixes following the CrowdStrike outage.

The incident highlights update management, supply chain and resilience challenges.

Security pros say it will take “days” to fix the recent CrowdStrike outage.

An unpatched vulnerability in the way Windows handles installer files could put systems at risk of attack.

CISA added three bugs to the KEV catalog in all; Cisco gives flaw on Cisco Smart Software Manager On-Prem a 10 rating.