Blue Turtle Technologies’ Post

Flexera’s March Software Vulnerability Report is now available, and here are some key takeaways: - #NVDChallenges: The vulnerability community is abuzz with concerns over potential delays in vulnerability analysis at NVD - 1,073 total advisories this month, marking an increase from the last record of 1,055 and a 44% surge compared to Q1 2023 - Critical alerts: We've flagged 2 extremely critical advisories this month, doubling from last month's count 𝗗𝗼𝘄𝗻𝗹𝗼𝗮𝗱 𝗥𝗲𝗽𝗼𝗿𝘁 𝗡𝗼𝘄: https://lnkd.in/g2QpEKQv

To understand the current challenges of NVD in Detail , Please have a look at the following link --> : https://lnkd.in/dSaCDHBk #NVDChallenges

Top highlights from the May Monthly Vulnerability Insights report: - #NVDChallenges: Over 13,000 CVEs are currently awaiting analysis but Flexera’s Software Vulnerability Research (Secunia Research) remains unaffected by these delays. - A record-breaking 1,277 total advisories this month, the highest number of advisories recorded in a single month since 2002. - Critical alerts: We've flagged 12 extremely critical advisories this month, up from 2 last month.

CrushFTP Zero-Day Exploitation Due to CVE-2024-4040: Vulnerability Scope & Details CrushFTP disclosed a zero-day vulnerability in their software on April 19, 2024. The vulnerability is published on CVE-2024-4040. Affected versions: The CVSS score is 9.8.  The vulnerability allows remote attackers to bypass the VFS sandbox and access files outside their designated limits without authentication. The vulnerability was exploited to do unauthenticated remote […]

Exploit code has surfaced for a critical authentication bypass vulnerability present in Fortra’s GoAnywhere MFT (Managed File Transfer) software. This vulnerability allows attackers to generate new admin users on instances lacking the latest patches, exploiting the administration portal as the point of entry. Full post: https://lnkd.in/ds7nik2g #fortra #exploit #goanywhere #mft #hacking #vulnerability #informationsecurity #infosec

Do you know how vulnerable your attack surface is? RunSafe's Attack Surface Reduction Index helps secure the software supply chain by reducing exploitation of vulnerabilities. This is done by prioritizing remediation of high-risk software, while leveraging open source software and sharing software bill of materials (SBOMs). Want to learn more? Check out our whitepaper that dives deeper into our effort to shift the balance of power from the attacker to the defender while preventing data loss. https://runsafe.ly/3tX3OKj #riskmanagement #SoftwareBillofMaterials #cybersecurityawareness

Downdetector, the world’s most popular platform for online service status information, observed millions of users reporting problems with different websites and services during the CrowdStrike outage. This event highlighted the vulnerabilities of online services to software glitches and the crucial role of tools like Downdetector in providing real-time analysis. Register for our upcoming webinar to learn more: https://ookla.d.pr/m6dBN3 Daniel Ramírez, Sue Marek

A Potential DOS Vulnerability exists in CERT software prior to version 3.0.8A...A Potential DOS Vulnerability exists in CERT VINCE software prior to version 3.0.8. An authenticated administrative user can inject an arbitrary pickle object as part of a user's profile. This can ...https://lnkd.in/geTrHX58

Discover how to secure sensitive data and eliminate software vulnerabilities with exhaustive static analysis in Trusted Execution Environments (TEE). Read our white paper for secure, reliable solutions: https://bit.ly/3Bsrcms #TEE #SoftwareSecurity #ReliableSoftware

SolarWinds Serv-U Vulnerability Under Active Attack – Patch Immediately SolarWinds Serv-U Vulnerability Under Active Attack - Patch Immediately A recently patched high-severity flaw impacting SolarWinds Serv-U file transfer software is being actively exploited by malicious actors in the wild. The vulnerability, tracked as CVE-2024-28995 \(CVSS score: 8.6\), concerns a directory transversal bug that could allow attackers to read sensitive files on the host machine. Affecting all versions of the software prior to and including Serv-U 15.4.2 \{authorlink\} Ricardo_Bot https://lnkd.in/gfy7Csbj