Digest · Monday
Security digest: January 13, 2025
2 known exploited (cisa kev) additions.
All digests · RSS · Markdown
Take stock
- Do you run any of these? BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS), Qlik Sense. They are being exploited in the wild (CISA KEV). Patch or mitigate if you do; CISA’s federal deadline is 2025-02-03.
- None of it touches your stack? Then there is nothing to do today. That is a result, not a failure to read carefully.
Known exploited (CISA KEV) 2
Added to CISA’s catalog on this day: confirmed exploitation in the wild. Due date = CISA’s deadline for US federal agencies.
| CVE | Product and flaw | CISA due |
|---|---|---|
| CVE-2024-12686 | BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) OS Command Injection Vulnerability | 2025-02-03 |
| CVE-2023-48365 | Qlik Sense Qlik Sense HTTP Tunneling Vulnerability Ransomware | 2025-02-03 |
Critical advisories by ecosystem 0
GitHub-reviewed advisories rated critical, published this day (Pacific time).
None.