Week -06-12-2024- ((top)) | 0-day And Hitlist

Organizations should prioritize applying the December 2024 security updates. If you are running a Windows Server or Windows 11 version affected by CVE-2024-49138, you should treat this as a Priority 1 (P1) remediation. Delaying this patch leaves the door open for local privilege escalation.

Progress Software released a patch for MOVEit Transfer on June 11th, confirming that this vulnerability was already being exploited in the wild. 0-day and Hitlist Week -06-12-2024-

Ultimately, the week of June 12, 2024, proved that the comic book market thrives when publishers balance massive, company-wide crossovers with high-concept indie experiments. It stands out as a baseline standard for what a perfect "Hitlist Week" looks like for the modern comic fan. Progress Software released a patch for MOVEit Transfer

Simultaneously, the notorious threat actor IntelBroker was advertising a zero-day Remote Code Execution (RCE) exploit for Atlassian's Jira software for the staggering price of $800,000. These advertisements create a volatile "hitlist" of vulnerabilities that are not yet publicly known, leaving enterprise security teams blind to the most critical risks they face. The sale and trade of such exploits on the dark web accelerate the timeline from vulnerability discovery to widespread attack, demanding that defenders rely on proactive threat intelligence and zero-trust principles. the week of June 12