vulnerabilities
Some 300,000 endpoints may be publicly exposed to RCE, but these are likely to be largely desktops not servers.
An attacker would need to craft a malicious container and run it "either directly (for example in services allowing shared GPU resources) or indirectly through a supply chain or social engineering attack"
Still a hit with hackers after all these months
net group “ESX Admins” username /domain /add.
CVE-2024-4879 (CVSS 9.8) lets “an unauthenticated user remotely execute code” -- ServiceNow swiftly pushed fix to hosted instances but those self-hosting must...
Cisco says 42 products confirmed exposed to CVE-2024-6387 -- but OpenSSH exploit is malicious: Beware bogus POCs says Kaspersky
RHEL 9 affected, Debian, Ubuntu, SUSE push fixes
Fix up, look sharp: Uncle Sam is running out of patience with tech firms shipping insecure software. Vendors? Get familiar with the phrase "query parameterization"...