CISA
Bug lets attackers to bypass even accounts with multi-factor authentication enabled.
CVE-2020-2883: You patched that when you first heard about it, right? Ditto these Mitel Colab bugs...
Meanwhile... "leadership deprioritized the treatment of a vulnerability their own cybersecurity team identified".
"This doesn’t bode well. Easterly has done an outstanding job and this role is too important to be a political football."
Expedition, a migration tool, hit by bug that could allow attackers with network access to "access secrets, credentials, and other data".
"These individuals appear to be gaining cyber experience and enhancing their technical skills through conducting cyber operations and intrusions."