Storm⚡️Watch | Tech Giants Stumble: Georgia Tech Sued, Solar Winds Leaks, and Freaky Friday KEV Drops.
Summary: The U.S. Department of Justice filed a legal action against Georgia Tech and its research corporation over alleged cybersecurity violations. The episode also covers a credential leak in a SolarWinds Web Help Desk hotfix, an authentication flaw in DiCal-RED, and the rapid KEV catalog addition of CVE-2024-39717, a Versa Director vulnerability with limited public information on its exploitation.
Bottom line: CVE-2024-39717 was added to the KEV catalog quickly despite little public detail on how it is being exploited, leaving defenders to act on a vulnerability whose exploitation picture is largely unknown.
Read the original at GreyNoise Blog ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2024-39717
- Related
- CVE-2024-39717: Versa Director Dangerous File Type Upload Vulnerability Known Exploited Vulnerabilities · Aug 23, 2024New 0-Day Attacks Linked to China’s ‘Volt Typhoon’ Cyber Risks ·Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026