Today's brief_
The five threats defenders should see today
- 01
CVECriticalRCERuby releases Onigmo fixes for GitLab remote-code-execution flawsRuby released three versions fixing Onigmo bugs that GitLab found could enable remote code execution on GitLab servers. The releases contain all of the fixes. - 02
CVECriticalCVELumen: Volt Typhoon exploited four confirmed zero-days via Silent Train networkLumen said its monitoring helped uncover at least four confirmed and one likely zero-day vulnerabilities that Volt Typhoon exploited. - 03
CVECriticalPATCHAdobe patches Campaign Classic flaws that could enable code executionAdobe patched critical Campaign Classic vulnerabilities that could enable code execution, security feature bypass and privilege escalation, plus a critical Connect code-injection flaw. - 04
CVECriticalCVEAnthropic model chained flaws into Chrome, Safari and Linux exploitsAnthropic said an unreleased AI model chained flaws into working exploits affecting Chrome, Safari, Android, Windows and Linux. - 05
LEAKMediumBREACHGMO Internet Group reward program follows Onamae.com Desktop Cloud breachGMO Internet Group opened a reward program offering up to $1 million after attackers breached its Onamae.com Desktop Cloud service, The Hacker News reported.