Oct 5, 2023
2 new incidents, 2 with updates.
Started
- ClosedPatched
Apple iOS and iPadOS: Kernel Privilege Escalation (CVE-2023-42824)
Apple iOS and iPadOS contain an unspecified vulnerability that allows for local privilege escalation. Added to CISA KEV on 2023-10-05.
Apple iOS and iPadOSClosed Oct 5, 2023
- ClosedPatched
Progress WS_FTP Server: Deserialization of Untrusted Data (CVE-2023-40044)
Progress WS_FTP Server contains a deserialization of untrusted data vulnerability in the Ad Hoc Transfer module that allows an authenticated attacker to execute remote commands on the underlying operating system. Added to CISA KEV on 2023-10-05. CISA lists known use in ransomware campaigns.
Progress WS_FTP ServerClosed Oct 5, 2023
Updated
- ClosedPatched
Confluence Data Center/Server zero-day lets attackers create admins (CVE-2023-22515)
A broken access control bug in publicly reachable Confluence Data Center and Server let outside attackers create Confluence administrator accounts. It was exploited as a zero-day, and Microsoft attributed it to the China-nexus Storm-0062. Atlassian Cloud was not affected.
Atlassian Confluence Data Center and ServerClosed Oct 16, 2023
- ClosedHighNo fix needed
MGM Resorts and Caesars hit by Scattered Spider
Scattered Spider, an ALPHV/BlackCat affiliate, used social engineering to breach two Las Vegas casino giants. Caesars lost its loyalty program database and reportedly paid about $15M. MGM shut down systems for days and estimated a $100M hit, with pre-March-2019 customer data stolen.
MGM Resorts International; Caesars EntertainmentClosed Oct 5, 2023
