এই এপিসোড সম্বন্ধে
Welcome to Blumira Briefings, your weekly download of the top headlines for your security practice!
In this week's edition:
- Critical Remote Code Execution Vulnerability in Gitea Actively Exploited, CISA Warns
- Critical WordPress SAML Plugin Authentication Bypasses Actively Exploited While Unpatched
- Microsoft Advises Network Controls as Vulnerability Patching Window Rapidly Shrinks
Sources:
Hackers now exploit critical Gitea flaw in code injection attacks
https://www.bleepingcomputer.com/news/security/hackers-now-exploit-critical-gitea-flaw-in-code-injection-attacks/
--
Two CVSS 9.8 Auth Bypasses in miniOrange SAML WordPress Plugin Were Exploited Before Any Database Even Listed the Paid Editions as Vulnerable
https://securityaffairs.com/197815/security/two-cvss-9-8-auth-bypasses-in-miniorange-saml-wordpress-plugin-were-exploited-before-any-database-even-listed-the-paid-editions-as-vulnerable.html
--
Microsoft warns patch window is collapsing, urges shift to network-level containment
https://www.csoonline.com/article/4214135/microsoft-warns-patch-window-is-collapsing-urges-shift-to-network-level-containment.html
--
