InfoSecBulletin Cybersecurity for mankind
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) included a Microsoft SharePoint Server vulnerability in its list of known exploited vulnerabilities due to signs of active use by attackers.
CVE-2023-24955 is a critical flaw that lets a user with Site Owner access run any code they choose.
Phoenix Summit 2024: Elevating Cyber security, Impact and Vision
ALERT: SEKOIA REPORT
PlugX Malware Plagues Over 90k IP Addresses over 170 countries
Palo Alto network shared latest remediation of CVE-2024-3400
CISA Launches Ransomware Vulnerability Warning Pilot for Critical Infrastructure
WhatsApp warns India to exit, If…
Fake e-mail of Rajshahi Univ VC’ name-picture, sending messages
Bad actor threat to expose BSNL 2.9 million data
India’s ICICI Bank exposed thousands of credit cards to ‘wrong’ users
CISA Releases Eight Industrial Control Systems Advisories
Google fixed critical Chrome vulnerability CVE-2024-4058
“In a network-based attack, an authenticated attacker as a Site Owner could execute code remotely on the SharePoint Server,” Microsoft said in an advisory. Microsoft fixed the flaw in its May 2023 Patch Tuesday updates.
More than two months ago, CISA added CVE-2023-29357, a privilege escalation flaw in SharePoint Server, to its KEV catalog.
Microsoft previously told “customers who have enabled automatic updates and enable ‘Receive updates for other Microsoft products’ option within their Windows Update settings are already protected.”
Federal agencies must implement these security updates by April 16, 2024, to protect their systems.
