Feb 12, 2024
1 new incident, 1 with updates.
Started
- ClosedMediumPatched
Roundcube Webmail Persistent Cross-Site Scripting (XSS)
Roundcube Webmail contains a persistent cross-site scripting (XSS) vulnerability that can lead to information disclosure via malicious link references in plain/text messages. Added to the CISA KEV catalog on 2024-02-12. CVE-2023-43770 was assigned before 2024; the KEV listing came in 2024.
Roundcube WebmailClosed Feb 12, 2024
Updated
- ClosedCriticalNo fix needed
Change Healthcare ransomware attack (ALPHV/BlackCat)
The ALPHV/BlackCat ransomware gang got into UnitedHealth's Change Healthcare on 2024-02-12 using stolen credentials for a Citrix remote-access portal without multi-factor authentication, then deployed ransomware on 2024-02-21. Claims processing and pharmacy payments across the US health system were disrupted for weeks. By October 2024 Change Healthcare had sent about 100 million notices to individuals (later estimates were about 190 million people).
Change Healthcare (UnitedHealth Group / Optum)Closed Oct 22, 2024
