CISA put two more flaws into its Known Exploited Vulnerabilities catalog on October 28. One is a Linux kernel bug that hands root to any local user. The other is a VMware ESX logging gap that carries a CVSS score of 2.7, which is about as low as a score gets before it stops being worth a CVE. That second one is the interesting entry. A 2.7 doesn't land in KEV by accident. It … [Read more...] about CISA Adds Exploited VMware ESX Logging Flaw and Fragnesia Linux Root Bug to KEV Catalog
Vulnerabilities
IBM X-Force: Stolen Credentials and Vulnerabilities Weaponized Against Businesses in 2019
Consumer Tech Brands Caught in Crossfire of Phishing Attacks; Misconfigurations Accounted for Over 85% of Exposed Records; Banking Trojans and Ransomware Form Strong Bond IBM (NYSE: IBM) Security today released the IBM X-Force Threat Intelligence Index 2020, highlighting how cybercriminals' techniques have evolved after decades of access to tens of billions of corporate and … [Read more...] about IBM X-Force: Stolen Credentials and Vulnerabilities Weaponized Against Businesses in 2019