Atlassian, Microsoft bugs on CISA’s must-patch list after exploitation spree
GreyNoise, a company that tracks and analyzes internet traffic, said itCISA put the vulnerability in Bitbucket Server and Data Center tools on the KEV list on the same day as two high-profile Microsoft Exchange zero-day flaws.the vulnerability August 24, saying it affected both the Server and Data Center builds of its Git-based source code management tool.
"There has been strong interest in the vulnerability from researchers and exploit brokers, and there are now multiple public exploits available," they wrote before the reports of exploitation attempts arose, foretelling the future. In its alert, Atlassian listed seven versions that had been fixed and recommended that organizations upgrade their tools immediately. If that's not possible, they should turn off public repositories.
Both were reported by Vietnamese cybersecurity firm GTSC late last week and Microsoft's Threat Intelligence Team said in aOctober 1 that the holes were being exploited in"limited targeted attacks." We're told a single crew in August was able to exploit the bugs to install a backdoor and exfiltrate data from a victim's network, for instance.
Brasil Últimas Notícias, Brasil Manchetes
Similar News:Você também pode ler notícias semelhantes a esta que coletamos de outras fontes de notícias.
Best pumpkin patches to try in Lancashire this HalloweenFrom spookily-themed fancy dress to festival events, there's a host of fabulous pumpkin patches to enjoy in our region this October
Consulte Mais informação »
2022 TIME100 Next: Mattie Parker'Now mayor at 38, MayorMattie builds consensus for a safer and stronger Fort Worth, nurtures thriving families, and fosters quality of life in every ZIP code,' writes RepKayGranger TIME100Next
Consulte Mais informação »
2022 TIME100 Next: Donnel BairdAmerica’s home energy sector is a mess. Enter Donnel Baird (DBaird13), founder and CEO of BlocPower, a climate technology company that retrofits buildings in low-income neighborhoods with solar panels, electric heat pumps and other green tech TIME100Next
Consulte Mais informação »
2022 TIME100 Next: Spencer CoxWhen the Utah legislature passed a bill prohibiting trans students from participating in school sports, SpencerJCox vetoed it. He has struck an inclusive tone on race and LGBTQ issues while pursuing a conservative policy agenda TIME100Next
Consulte Mais informação »
2022 TIME100 Next: Machine Gun Kelly.AvrilLavigne on machinegunkelly: 'He’s grown in the most authentic way, starting as a rapper and evolving into one of the biggest rock stars in the world' TIME100Next
Consulte Mais informação »