ISC StormCast for Wednesday, January 17th, 2024

Ivanti Vulnerability Widespread Scanning

https://isc.sans.edu/diary/Scans%20for%20Ivanti%20Connect%20%22Secure%22%20VPN%20%20Vulnerability%20%28CVE-2023-46805%2C%20CVE-2024-21887%29/30562

https://www.volexity.com/blog/2024/01/15/ivanti-connect-secure-vpn-exploitation-goes-global/

Citrix Patches Already Exploited Vulnerability

https://support.citrix.com/article/CTX584986/netscaler-adc-and-netscaler-gateway-security-bulletin-for-cve20236548-and-cve20236549

Atlassian Confluence Remote Code Execution Vulnerability

https://confluence.atlassian.com/security/cve-2023-22527-rce-remote-code-execution-vulnerability-in-confluence-data-center-and-confluence-server-1333990257.html

macOS Infostealers

https://www.sentinelone.com/blog/the-many-faces-of-undetected-macos-infostealers-keysteal-atomic-cherrypie-continue-to-adapt/

Google Chrome 0-day

https://chromereleases.googleblog.com/2024/01/stable-channel-update-for-desktop_16.html

GitHub Key Rotation

https://www.bleepingcomputer.com/news/security/github-rotates-keys-to-mitigate-impact-of-credential-exposing-flaw/

atlassian atlassian confluence business chrome chrome 0-day citrix code code execution computer confluence cyber cybersecurity daily exploited github google google chrome hacking infosec infostealers internet isc ivanti january key macos network patches remote code remote code execution rotation scanning security vulnerability