InfoSecBulletin Cybersecurity for mankind

CISA warned U.S. government agencies on Thursday to protect their systems from a critical Microsoft Configuration Manager vulnerability that was fixed in October 2024 and is currently being exploited. Microsoft Configuration Manager is a tool for IT management of many Windows servers and workstations. CVE-2024-43468 is an SQL injection vulnerability discovered …

Zimbra launched version 10.1.16 addressing serious vulnerabilities like cross-site scripting (XSS), XML external entity (XXE), and LDAP injection. This urgent update, marked as high risk for patch severity and deployment, requires admins to upgrade right away to protect against exploits. Attackers can use unsanitized inputs to insert harmful scripts, which …

Russia has attempted to completely block WhatsApp, according to the company. This is part of the government’s ongoing efforts to tighten internet control. A WhatsApp spokesperson said late Wednesday that the Russian authorities’ action was intended to “drive users to a state-owned surveillance app,” a reference to Russia’s own state-supported …