Phishing for the News - Weekly Roundup - December 21, 2024

Phishing for the News

Here are some of the top critical bullet points from this week's SecureResearch Cyber Intelligence briefings:

• Multiple vulnerabilities were discovered in Suricata, a popular open-source intrusion detection and prevention system. While the specific details of the vulnerabilities are not publicly available, they are considered critical and should be treated as high severity.
• Critical flaws were found in the Red Hat Linux kernel. These flaws could be exploited by attackers to execute arbitrary code, breach data confidentiality, and compromise data integrity.
• Multiple vulnerabilities in IBM products were found. These vulnerabilities enable remote code execution, denial-of-service conditions, and data confidentiality breaches.
• Multiple critical vulnerabilities were found in Siemens industrial control system products. Impacted products include SIMATIC PCS 7, SIMOTION, SINUMERIK, and more.
• CISA released advisories addressing critical vulnerabilities in industrial control systems (ICS). The affected products include Rockwell Automation Allen-Bradley Micro800 Controllers and Siemens SIMATIC S7-1200 and S7-1500 PLCs.
• A significant vulnerability has been identified in multiple Becton, Dickinson, and Company (BD) Diagnostic Solutions products. The vulnerability stems from the use of default credentials within these systems.
• A critical command injection vulnerability has been identified in the ThreatQuotient ThreatQ Platform.
• A critical vulnerability was found in Schneider Electric Modicon Programmable Logic Controllers.
• Multiple critical vulnerabilities have been identified in Foxit products. These vulnerabilities allow malicious actors to potentially execute arbitrary code on affected systems, gain elevated privileges, and compromise confidential data.
• Multiple vulnerabilities were found in Sophos Firewall. These vulnerabilities could allow attackers to gain unauthorized access, execute arbitrary code, and exfiltrate sensitive data.
• Fortinet released a critical security update to address a vulnerability in FortiManager.
• Multiple critical vulnerabilities were discovered in the Linux kernel used in Ubuntu.
• Multiple vulnerabilities were discovered in the SUSE Linux kernel.

It's important to note that the severity of these vulnerabilities and the specific impact on organizations may vary. Organizations should prioritize patching and mitigation efforts based on their individual risk profiles and the criticality of affected systems.

For more information in the SecureResearch Daily Cyber Intelligence Brief, email [e-mail]