When Security Flaws Become Cyber Collectibles
CISA adds five more security defects to its Known Exploited Vulnerabilities catalogue, including an Adobe Acrobat and Reader flaw and an out-of-bounds write flaw in the Group Encrypted Transport VPN feature of Cisco IOS and IOS XE. The message is clear: Patch your stuff or face the consequences.
Hot Take:
Well, well, well, it seems like CISA has got its hands full – again! This time, they're adding five more security defects to their Known Exploited Vulnerabilities (KEV) catalogue, like a kid collecting rare baseball cards – only these are much more dangerous. The star of the show? An Adobe Acrobat and Reader flaw. But don't worry, Adobe patched it up – back in January 2023. Oh, you didn't apply the patch? Tough luck! CISA's also shining a spotlight on an out-of-bounds write flaw in the Group Encrypted Transport VPN feature of Cisco IOS and IOS XE. I mean, who doesn't love a good RCE vulnerability?Already a member? Log in here