-
Rubrik confirms attack exploiting GoAnywhere zero-day vulnerability
Rubrik, a cloud data management and security provider, has confirmed that it fell victim to an attack exploiting a GoAnywhere zero-day vulnerability. Rubrik was named on the leak website of the ransomware group Cl0p. In early February, Fortra, previously known as HelpSystems, had warned its GoAnywhere managed file transfer software users about a remote code…
-
Microsoft’s Patch Tuesday Addresses Zero-Day Vulnerabilities and Notable Flaws
Microsoft Addresses Zero-Day Vulnerabilities on March 2023 Patch Tuesday On this March 2023 Patch Tuesday, Microsoft has released fixes for 74 CVE-numbered vulnerabilities, including two zero-day flaws (CVE-2023-23397, CVE-2023-24880) that are actively exploited by different threat actors. CVE-2023-23397 Microsoft has identified CVE-2023-23397 as a critical elevation of privilege (EoP) vulnerability in Microsoft Outlook. This vulnerability…