Security
"We are working internally, and with leading external experts, to remediate the issue.”
"We need to reduce moving parts," VP says.
World-famous library is still battling to recover from an incident described as one of the worst in British history.
"It's the world's biggest red team," creator claims.
Researchers allege that bugs could allow adversaries to "inject malicious libraries into Microsoft's applications to gain entitlements and user-granted permissions".
CVE-2024-38063 lets unauthenticated attackers carry out remote code execution by "repeatedly sending IPv6 packets".
"Supply chains for local councils will always be the weakest link to be exploited by attackers looking for valuable information due to the vast number of services employed for operations."
The bugs include four publicly known flaws and six that have been exploited in the wild.
Cops claims the crook "essentially pioneered both the exploit kit and ransomware-as-a-service models".