Week 46 of 2024

In this week's Threat Intelligence Briefing

• CVE-2024-10914 & CVE-2024-3273: Critical bug in EoL D-Link NAS devices now exploited in attacks
• Advisory: Microsoft November 2024 Patch Tuesday fixes 4 zero-days, 89 flaws
• CVE-2024-40711: Critical Veeam RCE bug now used in Frag ransomware attacks
• Advisory: FBI, CISA, and NSA reveal most exploited vulnerabilities of 2023
• Advisory: Microsoft blames Windows Server 2025 automatic upgrades on 3rd-party tools

Brought to you by Joey Vandegrift and Brad Causey, CISSP at SecurIT360

Making Penetration Test Results Actionable

Why SOC 2 Compliance Isn't The Same As Security