News
Adobe Patches Reader Exploits: Update Now
Adobe has recently patched critical vulnerabilities in Acrobat and Reader, notably CVE-2024-41869, an extended fix of a supposed August patch (CVE-2024-39383). Despite uncertainties over an unfinished PoC exploit detected by EXPMON, a tool for spotting advanced file-based threats, users are strongly advised to update promptly. Better safe than sorry—don't let your PDFs crash your security party!
helpnetsecurity.com
Vo1d Malware Hijacks 1.3M Android TV Boxes
Heads up, TV watchers! The new Vo1d malware has stealthily infected 1.3 million Android TV boxes across 197 countries, exploiting outdated operating systems to install third-party software. Major hotspots include Brazil, Russia, and Indonesia. The malware cleverly mimics system files and operates persistently, making it a serious threat to IoT security. Stay alert and ensure your devices are running the latest firmware!
thehackernews.com
GitLab Patches Critical Pipeline Execution Flaw
GitLab users, beware! A critical pipeline execution vulnerability (CVE-2024-6678) could let attackers run pipelines as arbitrary users, making it imperative to update to the latest versions (17.3.2, 17.2.5, and 17.1.7) immediately. With a severity score of 9.9, the flaw threatens remote exploitation with minimal effort. The update also patches 17 other security issues, reinforcing the need to stay current to keep your CI/CD workflows secure.
bleepingcomputer.com