Conversation

Notices

1. Embed this notice
   Dan Goodin (dangoodin@infosec.exchange)'s status on Sunday, 21-Jan-2024 01:42:11 JST Dan Goodin

   • Kevin Beaumont

   Current or former zerodays currently under mass exploitation:

   -- Ivanti Policy Secure and Ivanti Connect Secure (CVE-2023-2023-46805 and CVE-2024-21887)

   -- VMware Vcenter Server (CVE-2023-34048 )

   Are there any major others I'm forgetting?

   @GossiTheDog

   • Embed this notice
     Aleks (fuzzyaleks@infosec.exchange)'s status on Sunday, 21-Jan-2024 01:42:11 JST Aleks

     in reply to

     • Kevin Beaumont

     @dangoodin @GossiTheDog CVE-2023-34048 wasn’t a zeroday, it was reported by zdi. What’s the source for it being exploited itw?