Overview A Speculative Race Condition (SRC) vulnerability that impacts modern CPU architectures supporting speculative execution has been discovered. CPU hardware utilizing speculative execution that are vulnerable to Spectre v1

The Secure Flex Premium platform is a single-tenant architecture that can be deployed on top of an existing on-premises, hybrid or cloud environment.

The surge in activity can be attributed to the exploitation of high-profile vulnerabilities, Palo Alto Networks' threat intelligence team noted.

CISA Adds One Known Exploited Vulnerability to Catalog: Fortinet FortiOS

Cisco Releases Security Advisory for Vulnerabilities in Cisco Expressway Series

CISA Adds One Known Exploited Vulnerability to Catalog: Google Chromium V8

Moby and Open Container Initiative Release Critical Updates for Multiple Vulnerabilities Affecting Docker-related Components

CISA and FBI Release Secure by Design Alert Urging Manufacturers to Eliminate Defects in SOHO Routers

New Mitigations to Defend Against Exploitation of Ivanti Connect Secure and Policy Secure Gateways

Cisco Releases Security Advisory for Multiple Unified Communications and Contact Center Solutions Products

The Network Resilience Coalition published a white paper to offer recommendations to address the security risks of end-of-life products.

Crestron AM-300

Lantronix XPort

When exploited together, the vulnerabilities allow threat actors to execute arbitrary commands on the system without requiring authentication.

Cisco Releases Security Advisory for Cisco Unity Connection

Schneider Electric Easergy Studio

Siemens SICAM A8000

Rapid Software LLC Rapid SCADA

Cambium ePMP 5GHz Force 300-25 Radio

Steve Schmidt also identified three key questions that organizations should answer to ensure the safe and appropriate use of generative artificial intelligence.

“In 2024 we expect attackers to use generative AI and LLMs [large language models] to personalize and slowly scale their campaigns,” said Google Cloud CISO Phil Venables.

EVP Jeetu Patel noted there is no timeline when a patch is available for the vulnerability and urged users to disable the HTTP server feature.

Tech giants warn that all organizations or individuals serving HTTP-based workloads on the internet might be vulnerable to this distributed denial of service attack.

CrowdStrike CEO George Kurtz said the integration gives the vendor “one of the most complete cloud security offerings on the planet.”