The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added three security flaws to its Known Exploited Vulnerabilities (KEV) catalog, based on evidence of active exploitation.
The three vulnerabilities are as follows –
CVE-2023-28432 (CVSS score – 7.5) – MinIO Information Disclosure Vulnerability
CVE-2023-27350 (CVSS score – 9.8) – PaperCut MF/NG Improper Access Control
Zero-day vulnerabilities are more commonly used, according to the Five Eyes: Key Findings In 2023, malicious cyber actors exploited more
According to research from GitGuardian and CyberArk, 79% of IT decision-makers reported having experienced a secrets leak, up from 75%
What do hijacked websites, fake job offers, and sneaky ransomware have in common? They’re proof that cybercriminals are finding smarter,
IT leaders know the drill—regulators and cyber insurers demand regular network penetration testing to keep the bad guys out. But