Patch/Configuration Management

BleepingComputer reports that Kaspersky has launched the new free KVRT tool that enables the scanning of malware, adware, malicious programs, and other security threats in Linux systems on 64-bit architecture.

The Cybersecurity and Infrastructure Security Agency has updated its Known Exploited Vulnerabilities catalog to include a use-after-free security issue impacting Linux kernel versions from 5.14 to 6.6, tracked as CVE-2024-1086, which could be leveraged to enable arbitrary code execution and privilege escalation, SecurityWeek reports.

Organizations in the financial industry around the world were warned by cyber threat intelligence expert Anis Haboubi regarding the persistent risk of attacks exploiting the years-old Apache Log4j2 vulnerability, tracked as CVE-2021-44832, as evidenced by the recent breaches at U.S. business intelligence software company Sisense and cloud storage provider Snowflake, which have systems widely used in the sector, reports Security Affairs.

As the industry relies more on open source software, it really needs to take a more proactive stance on patching vulnerabilities.

Exploitation attempts focused mostly on old local accounts with password-only authentication.

Intrusions infiltrating enterprise networks through Check Point Remote Access VPN instances are underway, according to BleepingComputer.

Security pros say because this bug was exploited in the wild, assume threat actors have launched remote code execution attacks.