Critical unauthenticated RCE flaw in OpenSSH server

MUST READ. Critical unauthenticated remote code execution flaw in OpenSSH server.
Expert released PoC exploit code for Veeam Backup Enterprise Manager flaw CVE-2024-29849.
CISA adds Oracle WebLogic Server flaw to its Known Exploited Vulnerabilities catalog.
CISA adds Apache Flink flaw to its Known Exploited Vulnerabilities catalog.
Critical Fortinet's FortiClient EMS flaw actively exploited in the wild.
PoC exploit for critical RCE flaw in Fortra FileCatalyst transfer tool released.
Threat actors exploit Apache ActiveMQ flaw to deliver the Godzilla Web Shell.
APT group UAC-0099 targets Ukraine exploiting a WinRAR flaw.
Threat actors breached US govt systems by exploiting Adobe ColdFusion flaw.
Threat actors started exploiting critical ownCloud flaw CVE-2023-49103.
Critical Confluence flaw exploited in ransomware attacks.
Experts released PoC exploit code for Cisco IOS XE flaw CVE-2023-20198.
Experts released PoC exploit code for VMware Aria Operations for Logs flaw.
CISA adds second Cisco IOS XE flaw to its Known Exploited Vulnerabilities catalog.
CISA adds Cisco IOS XE flaw to its Known Exploited Vulnerabilities catalog.
North Korea-linked APT groups actively exploit JetBrains TeamCity flaw.
Multiple APT groups exploited WinRAR flaw CVE-2023-38831.
CISA adds Adobe Acrobat Reader flaw to its Known Exploited Vulnerabilities catalog.
Apple fixed the 17th zero-day flaw exploited in attacks.
US CISA added critical Apache RocketMQ flaw to its Known Exploited Vulnerabilities catalog.

This Cyber News was published on securityaffairs.com. Publication date: Mon, 01 Jul 2024 15:13:06 +0000