InfoSecBulletin Cybersecurity for mankind
CISA warned U.S. government agencies on Thursday to protect their systems from a critical Microsoft Configuration Manager vulnerability that was fixed in October 2024 and is currently being exploited. Microsoft Configuration Manager is a tool for IT management of many Windows servers and workstations.
CVE-2024-43468 is an SQL injection vulnerability discovered by Synacktiv that lets remote attackers execute arbitrary commands on the server and Microsoft Configuration Manager database without any privileges.
Apple iOS 27.2 Released Fixes 163 Flaws, Including Critical WebKit RCE
CISA adds PHP2Shell to KEV, PHP Releases New Security Updates to Fix Critical HTTP2Shell flaw
Cloudflare Unveils Emergency WAF Ruleset Update on Brotli flaw
Daily Cyber security update for 26.10. 2026
The Washington Post report
Ex-DOGE AI startup Cathedral Breaches Anthropic Internal Systems within 12 Hours
Daily Cyber security update for 25. 10. 2026
Daily Cyber security update for 24. 10. 2026
PHP shares new RCE flaw (CVE 2026-115560) with no patch but mitigation
US banks faced unauthorized access by AI agents in customer accounts: Axios reports
Atlassian patched 176 flaw in Jira and Confluence: Fortinet Urges to Patch Flaws Affecting FortiOS, FortiManager
“An unauthenticated attacker could exploit this vulnerability by sending specially crafted requests to the target environment which are processed in an unsafe manner enabling the attacker to execute commands on the server and/or underlying database,” Microsoft explained when it patched the flaw in October 2024.
At the time, Microsoft tagged it as “Exploitation Less Likely,” saying that “an attacker would likely have difficulty creating the code, requiring expertise and/or sophisticated timing, and/or varied results when targeting the affected product.”
CISA has now identified CVE-2024-43468 as being actively exploited and has instructed Federal Civilian Executive Branch (FCEB) agencies to update their systems by March 5th, as required by the Binding Operational Directive (BOD) 22-01.
“These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise,” the U.S. cybersecurity agency warned.
“Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.”
BOD 22-01 is aimed at federal agencies, but CISA urged all network defenders, including private sector ones, to quickly secure their devices against CVE-2024-43468 attacks.
| Action | Details |
|---|---|
| Immediate Actions | Scan with Defender or SSMS for suspicious queries. |
| Patch Fast | Install updates; test before production rollout. |
| Mitigate | Block untrusted IPs, enable IIS protection, use least privilege. |
| Cloud Twist | Enable MFA, logging, and zero-trust for Azure setups. |
Immediate Actions: Scan environments with tools like Microsoft Defender or SQL Server Management Studio for anomalous queries.
Patch Fast:Â Download updates from Microsoft Update Catalog. Test in staging first to avoid disrupting console access.
