CVE disclosures, zero-days, and vulnerability management
No description available.
Last week, two related RFCs were published:
CISA has added three new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation.
YARA-X&#;x26;#;39;s 1.14.0 release brings 4 improvements and 2 bugfixes.
View CSAF
CISA has added five new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation.
[This is a Guest Diary by Joseph Gruen, an ISC intern as part of the SANS.edu BACS program]
And another XWorm[1] wave in the wild! This malware family is not new and heavily spread but delivery techniques always evolve and deserve to be described to show you how threat actors can be imaginative! This time, we are facing another piece of multi-technology malware.