InfoSecBulletin Cybersecurity for mankind
CISA added a security flaw in the Linux kernel to the KEV catalog. This flaw is being actively exploited. The CVE-2024-1086 (CVSS score: 7.8) is a high-severity issue. It is related to a use-after-free bug in the netfilter component. This bug allows a local attacker to gain root privileges from a regular user and potentially run any code.
“Linux kernel contains a use-after-free vulnerability in the netfilter: nf_tables component that allows an attacker to achieve local privilege escalation,” CISA said.
Splunk targets Bangladeshi market: Investing in local talent
Critical PHP Zero-Day Vulnerability found in Craft CMS To Gain RCE
For US$2.6bn, Mastercard acquires threat intelligence firm Recorded Future
Eight New ICS Advisories released by CISA
Authority Denies
Hacker claim ransomware attack on Indonesia’s state bank BRI
London-based company “Builder.ai” reportedly exposed 1.2 TB data
(CVE-2024-12727, CVE-2024-12728, CVE-2024-12729)
Sophos resolved 3 critical vulnerabilities in Firewall
“Workshop on Cybersecurity Awareness and Needs Analysis” held at BBTA
CVE-2023-48788
Kaspersky reveals active exploitation of Fortinet Vulnerability
U.S. Weighs Ban on Chinese-Made Router TP-Link: WSJ reports
Netfilter is a framework in the Linux kernel that helps with network tasks like filtering packets, translating network addresses, and translating ports.
The vulnerability was fixed in January 2024, but it is currently unclear how the flaw was exploited in the attacks.
A new security flaw (CVE-2024-24919, CVSS score: 7.5) has been added to the KEV catalog. It affects Check Point network gateway security products, allowing attackers to read sensitive information on Internet-connected Gateways with remote access VPN or mobile access enabled.
Federal agencies should apply the latest fixes by June 20, 2024, to protect their networks from potential threats related to CVE-2024-1086 and CVE-2024-24919.
