Week 45 of 2024

In this week's Threat Intelligence Briefing

• CVE-2024-42509 and CVE-2024-47460: HPE Aruba Networking Access Points RCE Vulnerabilities
• CVE-2024-20418: Cisco Command Injection Vulnerability in UWRB Access Points
• Advisory: DocuSign's Envelopes API Abused to Send Realistic Fake Invoices
• CVE-2024-38094: Microsoft SharePoint RCE Vulnerability Exploited in Network Breaches
• Advisory: LastPass Warns of Fake Support Centers Targeting Customers
• CVE-2024-40715: Authentication Bypass Vulnerability in Veeam Backup Enterprise Manager

Brought to you by Joey Vandegrift and Brad Causey, CISSP at SecurIT360

Phishing With Malicious RDP Files

Ransomware on the Rise