Emergent Threat Response

Fortinet FortiManager CVE-2024-47575 Exploited in Zero-Day Attacks

Multiple Vulnerabilities in Common Unix Printing System (CUPS)

High-Risk Vulnerabilities in Common Enterprise Technologies

CVE-2024-40766: Critical Improper Access Control Vulnerability Affecting SonicWall Devices

Multiple Vulnerabilities in Veeam Backup & Replication

VMware ESXi CVE-2024-37085 Targeted in Ransomware Campaigns

Authentication Bypasses in MOVEit Transfer and MOVEit Gateway

Malvertising Campaign Leads to Execution of Oyster Backdoor

CVE-2024-28995: Trivially Exploitable Information Disclosure Vulnerability in SolarWinds Serv-U

CVE-2024-24919: Check Point Security Gateway Information Disclosure

CVE-2024-4978: Backdoored Justice AV Solutions Viewer Software Used in Apparent Supply Chain Attack

Ongoing Social Engineering Campaign Linked to Black Basta Ransomware Operators

Unauthenticated CrushFTP Zero-Day Enables Complete Server Compromise

CVE-2024-3400: Critical Command Injection Vulnerability in Palo Alto Networks Firewalls

Backdoored XZ Utils (CVE-2024-3094)

CVE-2024-27198 and CVE-2024-27199: JetBrains TeamCity Multiple Authentication Bypass Vulnerabilities (FIXED)

High-Risk Vulnerabilities in ConnectWise ScreenConnect

RCE to Sliver: IR Tales from the Field

Critical Fortinet FortiOS CVE-2024-21762 Exploited

CVE-2024-0204: Critical Authentication Bypass in Fortra GoAnywhere MFT

Critical CVEs in Outdated Versions of Atlassian Confluence and VMware vCenter Server