Patch/Configuration Management

Security pros say teams need to patch right away because attackers can leverage the bug to gain control of the entire boot process.

In the Security News: - Shim Shady, Up Shims Creek, whatever you want to call it, there’s a vulnerability affecting pretty much all Linux distributions (and other operating systems as well), when your toothbrush attacks the Internet, or some claim, glibc has some vulnerabilities, not all got a CVE, and one is for the algorithm lovers, Google shows ...

Mexico has been subjected to attacks with a new variant of the Mispadu banking trojan that involved the exploitation of a high-severity Windows SmartScreen vulnerability patched by Microsoft in November, according to The Hacker News.

Multiple threat actors have begun exploiting one of four recently discovered flaws afflicting the vendor’s VPN and network gateway products.

Mastodon account hijacking possible with critical bug Accounts in the decentralized social networking platform Mastodon could be remotely impersonated and taken over through the exploitation of a new critical origin validation error vulnerability, tracked as CVE-2024-23832, The Hacker News reports.

CISA urges federal and private-sector organizations to disconnect Ivanti VPNs vulnerable to zero-day flaws.

Numerous security issues impacting Juniper Networks' Junos OS and its J-Web configuration interface leveraged by its EX switches and SRX firewalls have been resolved as part of recently issued updates, reports SecurityWeek.