Threat Source newsletter (June 10, 2021)
Summary: Cisco Talos published an opinion piece with the Cyber Threat Alliance outlining steps government and the private sector need to take to protect physical life and property, critical infrastructure and the economy from ransomware. The same week, VMware warned of CVE-2021-21985, a 9.8-severity remote code execution flaw in the vSphere Client's Virtual SAN Health Check plug-in that is enabled by default in vCenter Server, and Microsoft released its monthly security update disclosing 49 vulnerabilities, including several it says are being actively exploited in the wild.
What's compelling: A default-enabled vCenter plug-in with a 9.8 severity score gives anyone with network access to the service remote code execution on the machines managing large data centers, and Microsoft's 49-vulnerability month includes flaws already being exploited in the wild.
Read the original at Cisco Talos ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2021-21985CVE-2021-31985
- Related
- CVE-2021-21985: VMware vCenter Server Improper Input Validation Vulnerability Known Exploited Vulnerabilities · Nov 03, 2021