Weekly Digest Week 51 – 2024
Featured Story Patch Alert: Critical Apache Struts Flaw Found, Exploitation Attempts Detected Threat actors are attempting to exploit a recently disclosed security flaw in Apache Struts that could lead to remote code execution. The issue (CVE-2024-53677, CVSS 9.5) affects Struts versions 2.0.0 through 2.3.37 (end-of-life), 2.5.0 through 2.5.33, and 6.0.0 through 6.3.0.2. A patch is […]
Weekly Digest Week 49 – 2024
Featured Story Hackers Actively Exploiting Zyxel Firewall Flaw To Deploy Ransomware Cybersecurity experts have uncovered a wave of attacks exploiting vulnerabilities in Zyxel firewalls to deploy the Helldown ransomware. This new ransomware operation, first observed in August 2024, is targeting organizations worldwide through a directory traversal flaw (CVE-2024-11667) in ZLD firmware versions 5.00 through 5.38. […]
