September 14, 2024 - Red Dot Security

Hello all,

Another Patch the Defects, Flaws, Vulnerabilities, and Bugs Day is behind us. There were a lot of issues revealed, with fixes for most of them proffered. Some that I consider to be noteworthy are listed below.

As usual, my commentary is followed by a plethora of links to other items that are worth skimming to see if they interest you or pertain to your particular environment or of those you support.

Headline NEWS:

Adobe has released fixes for dozens of security flaws in their products. At least one of these is a zero-day. Due to the almost ubiquitous nature of this software, make sure you patch quickly.
IBM webMethods, an iPaaS integration service, has several high severity flaws that allow an authenticated user to upload and execute arbitrary files on the underlying operating system, and to access and control the system. There are no workarounds, the update is required to mitigate.
Microsoft September Patch Tuesday plugged 79 defects, four of which are zero-days, one of which has a rating of 9.8. Patch soon, since those 4 are already being exploited. And still no patch for the “DownDate” hole that Microsoft has known about since February.
Palo Alto Networks warned of defects in PAN-OS, Cortex XDR, ActiveMQ Content Pack, and Prisma Access Browser. At least seven different CVE’s were addressed, with dozens of items needing patches.
Progress Software has acquired ShareFile… Please, I beg you, don’t turn this into another Ivanti. Similarly massive vulnerabilities in ShareFile would be devastating.

In Ransomware, Malware, and Vulnerabilities News:

SonicWALL’s critical defect, that I called out last week, is now under active exploitation. There are indications that several successful recent Ransomware attacks may have used this hole as the inroad into the victim’s network. If you haven’t patched your SonicWALLs yet, do so immediately and vet your networks.

In Other News Events of Note and Interest:

Microsoft uses automated robots to disassemble and recycle HDDs. This is advancing faster than I’d predicted. The visual acuity and manual dexterity required to locate screws and connectors, and to rotate and manipulate the drives to the proper orientation so that the screws and connectors can be removed is remarkable. It appears that robots may soon be doing onsite service calls.

In Cyber Insurance News:

While Cyber Insurance Prices Decline, Watch Out for Terms and Conditions. The old adage, If it seems too good to be true, it usually is, apples to some declining costs. Make sure that you carefully examine the Terms and Conditions of your newly proposed policy. You may not be getting what you expect.

Musings:
This weekend I attended a local B-Sides event. In case you’re unfamiliar, these are technology events that are put on all over the world by armies of local volunteers. The speakers are sometimes local, and often well-known international cyber-experts. One of the keynote speakers, JC Vega has been in this space for decades. In fact, he was the very first Cyber Colonel in the US Army. In part of his presentation, he talked about how important it is to make connections with others that have done what you’re doing. He encouraged those in attendance to connect to with “the guys with gray beards” in the room, the people that have years of experience. My LinkedIn blew up on Saturday…

Headline NEWS

Ransomware, Malware, and Vulnerabilities News

Other News Events of Note and Interest

Cyber Insurance News

Like this: