Storm Watch | Cyber News | New SEC Rules, Threat Predictions, and Vulnerability Impact Scoring

Summary: The Storm Watch roundtable noted the effective date of new SEC rules requiring companies to report material cybersecurity incidents to investors, with VF Corporation among the first to report after a December 13, 2023 cyberattack disrupted its ability to fulfill holiday orders. The episode also covered the FBI's confirmation that ALPHV was taken down, the Xfinity breach announcement, CISA advisories urging manufacturers to eliminate default passwords and a joint advisory on Play Ransomware, and vulnerability reviews of JetBrains TeamCity CVE-2023-42793 and Apache Struts2 CVE-2023-50164.
What's compelling: The SEC rules are now in force, and VF Corporation's holiday-season order fulfillment disruption shows how quickly a material incident becomes an investor disclosure obligation.

Read the original at GreyNoise Blog ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2018-11528 CVE-2023-42793 CVE-2023-49954 CVE-2023-50164 CVE-2023-6553
Related: CVE-2023-42793: Jet Brains Team City Authentication Bypass Vulnerability Known Exploited Vulnerabilities · Oct 04, 2023
A Day In The Life Of A Grey Noise Researcher: The Path To Understanding The Remote Code Execution Vulnerability Apache (CVE-2023-50164) in Apache Struts2 | Grey Noise Blog Cyber Risks ·
Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026