March 2024 – Page 4 – TheCyberThrone

Fortinet fixes critical vulnerabilities in FortiOS and FortiProxy

Fortinet has disclosed a critical vulnerability in its FortiOS and FortiProxy captive portal systems, potentially allowing attackers to execute arbitrary code through specially crafted HTTP requests. The vulnerability, identified as an out-of-bounds…

PravinKarthik March 13, 2024

Microsoft Patch Tuesday – March 2024

Microsoft patched 59 CVEs in its March 2024 Patch Tuesday release, with 2 rated critical and 57 rated as important. Elevation of privilege vulnerabilities accounted for 40.7% of the vulnerabilities…

PravinKarthik March 13, 2024

Zoho Desktop Central Vulnerability – CVE-2024-2370

Organizations using a widely deployed enterprise management solution are facing a serious security threat. A critical vulnerability has been discovered in older versions of ManageEngine Desktop Central, developed by Zoho…

PravinKarthik March 12, 2024

Magnet Goblin exploits Ivanti Vulnerabilities to breach CISA

The systems run by the U.S. CISA was breached by threat actors exploiting bugs in Ivanti products. Ivanti appliances have been under sustained attack this year from multiple threat groups,…

PravinKarthik March 12, 2024

Change Healthcare Attack – Most Significant in US Healthcare

A ransomware attack on Change Healthcare, that processes 15 billion health care transactions annually and deals with 1 in 3 patient records in the United States, is continuing to cause…

PravinKarthik March 11, 2024

Veritas NetBackup Critical Vulnerability – CVE-2024-28222

A critical vulnerability has been uncovered in Veritas NetBackup, the widely used enterprise backup solution. This flaw could allow unauthenticated hackers to remotely execute malicious code on NetBackup servers and…

PravinKarthik March 8, 2024