Digest · Thursday
Security digest: February 15, 2024
2 known exploited (cisa kev) additions.
All digests · RSS · Markdown
Take stock
- Do you run any of these? Microsoft Exchange Server, Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD). They are being exploited in the wild (CISA KEV). Patch or mitigate if you do; CISA’s federal deadline is 2024-03-07.
- None of it touches your stack? Then there is nothing to do today. That is a result, not a failure to read carefully.
Known exploited (CISA KEV) 2
Added to CISA’s catalog on this day: confirmed exploitation in the wild. Due date = CISA’s deadline for US federal agencies.
| CVE | Product and flaw | CISA due |
|---|---|---|
| CVE-2024-21410 | Microsoft Exchange Server Microsoft Exchange Server Privilege Escalation Vulnerability | 2024-03-07 |
| CVE-2020-3259 | Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) Cisco ASA and FTD Information Disclosure Vulnerability Ransomware | 2024-03-07 |
Critical advisories by ecosystem 0
GitHub-reviewed advisories rated critical, published this day (Pacific time).
None.