Jul 20, 2023
1 new incident, 2 with updates.
Started
- ClosedPatched
Adobe ColdFusion: 2 exploited vulnerabilities (CVE-2023-29298, CVE-2023-38205)
Adobe ColdFusion contains an improper access control vulnerability that allows for a security feature bypass. Added to CISA KEV on 2023-07-20.
Adobe ColdFusionClosed Jul 20, 2023
Updated
- ClosedPatched
NetScaler ADC/Gateway unauthenticated RCE (CVE-2023-3519)
An unauthenticated code injection in NetScaler ADC and Gateway was exploited as a zero-day to plant webshells, including on a US critical infrastructure organisation in June 2023. Citrix patched it on July 18, 2023.
Citrix NetScaler ADC and NetScaler GatewayClosed Jul 20, 2023
- ClosedHighNo fix needed
JumpCloud breached by North Korean hackers to reach crypto customers
A spear-phishing attack let a nation-state actor into JumpCloud's infrastructure. The attacker abused its command framework to target a small set of customers. JumpCloud force-rotated all customer API keys, and researchers tied the attack to North Korea, aimed at crypto companies.
JumpCloud (directory / device management SaaS)Closed Jul 20, 2023
