Patch/Configuration Management

Attacks on the Sophos and Oracle vulnerabilities are reportedly tracked to Chinese-backed threat groups.

While Intel released a fix for the Reptar flaw — and that’s good — security pros say teams must keep the BIOS, OS, and drivers updated as a matter of course.

Microsoft fixed three vulnerabilities that threat actors are exploiting, part of its' Patch Tuesday bug fix roundup.

Ongoing remote code execution attacks leveraging four Juniper J-Web interface vulnerabilities, tracked from CVE-2023-36844 to CVE-2023-36847, in a pre-auth exploit chain have led to their inclusion in the Cybersecurity and Infrastructure Security Agency's Known Exploited Vulnerabilities catalog, BleepingComputer reports.

Atlassian Confluence Data Center and Server instances infected with the Effluence backdoor through the exploitation of the critical vulnerability, tracked as CVE-2023-22515, remained compromised even after the application of issued patches, reports The Hacker News.

After exploiting MOVEit, GoAnywhere and PaperCut vulnerabilities the prolific Clop ransomware gang pivots and targets a SysAid zero-day server bug.

Atlassian has confirmed exploitation of an already addressed Confluence Data Center and Server flaw, tracked as CVE-2023-22518, to facilitate ransomware deployment after a Rapid7 report observed related infections with the Cerber ransomware, which is long believed to be defunct, reports The Record, a news site by cybersecurity firm Recorded Future.