Patch/Configuration Management

Security pros advise teams to use demo apps such as ChatRTX mainly in a test environment.

Organizations remediated security issues added to the Cybersecurity and Infrastructure Security Agency's Known Exploited Vulnerabilities catalog 3.5 times faster than those that are not in the catalog, according to The Record, a news site by cybersecurity firm Recorded Future.

More than 2,100 servers may still be vulnerable to GitLab password reset exploits.

Attacks by Russian threat operation APT28, also known as Fancy Bear, Strontium, and Forest Blizzard, using the GooseEgg malware to exploit the Windows print spooler flaw, tracked as CVE-2022-38028, have prompted the security issue's inclusion to the Cybersecurity and Infrastructure Security Agency's Known Exploited Vulnerabilities catalog, Security Affairs reports.

Security pros say given the complexity of SAN management tools, it’s understandable the patches took so long.

Security pros say there’s a high potential that attackers could launch arbitrary code execution.

Proof-of-concept exploits for CVE-2024-3400 are now publicly available.

Attackers exploited a critical vulnerability to create a new administrator account.