Okay, deep breath, let's get this over with. In the grand act of digital self-sabotage, we've littered this site with cookies. Yep, we did that. Why? So your highness can have a 'premium' experience or whatever. These traitorous cookies hide in your browser, eagerly waiting to welcome you back like a guilty dog that's just chewed your favorite shoe. And, if that's not enough, they also tattle on which parts of our sad little corner of the web you obsess over. Feels dirty, doesn't it?
CISA Sounds the Alarm: Internet Explorer and Twilio Authy Vulnerabilities Are Bad News for Cybersecurity!
CISA has added new vulnerabilities to its Known Exploited Vulnerabilities Catalog, including CVE-2012-4792 and CVE-2024-39891. These pose significant risks and are frequent attack vectors.
Hot Take:
Looks like CISA is channeling its inner Marie Kondo, decluttering the internet of vulnerabilities that do not spark joy. Or in this case, spark a cyber attack!
Key Points:
- Two new vulnerabilities added to CISA’s Known Exploited Vulnerabilities Catalog.
- CVE-2012-4792: Microsoft Internet Explorer Use-After-Free Vulnerability.
- CVE-2024-39891: Twilio Authy Information Disclosure Vulnerability.
- BOD 22-01 mandates FCEB agencies to fix these vulnerabilities by a set date.
- CISA advises all organizations to prioritize timely remediation.
Already a member? Log in here