/explore
|
You are here 
|
www.talosintelligence.com | ||
| | | | |
openssf.org
[AI summary] A backdoor vulnerability (CVE-2024-3094) was discovered in the xz package, allowing potential remote system compromise through compromised software supply chain practices. |
|
| | | | | ||
| | | | |
blog.talosintelligence.com
CVE-2023-44487, a vulnerability in the HTTP/2 protocol, was recently used to launch intensive DDoS attacks against several targets. |
|
| | | | | ||
| | | | |
sparklekitten.net
[AI summary] The post reviews May's threat intelligence landscape, highlighting the 3CX supply chain attack by North Korean actors, the targeting of ESXi servers by ransomware, the active exploitation of VEEAM backup vulnerabilities by FIN7, and a newly critical Cisco zero-day, alongside advice on mitigation strategies. |
|
| | | | | ||
| | | | |
blog.adolus.com
Firmware and software supply chain security for IT, OT and IoT. |
|
| | | |||
