Storm Watch | Cyber Insights | VMware Vulnerabilities, Microsoft's Russia Breach, and USB Hacks by Nation States
Summary: This GreyNoise Storm Watch episode covers recent critical vulnerabilities in VMware's ESXi as reported by SecurityWeek, along with the history of VMware vulnerabilities including log4j. It also discusses Russia's breach of Microsoft's systems and the SEC's disclosure policies, the resurgence of nation-state USB hacks highlighted by Dark Reading, and CISA's KEV catalog including a new KEV submission form on the Federal Register.
Key Takeaway: The episode ties together nation-state activity against Microsoft and renewed USB attack campaigns, plus active exploitation tracked in CISA's KEV catalog - the same catalog that now takes submissions through a Federal Register form, which changes who can put a vulnerability on the list your patching is measured against.
Read the original at GreyNoise Blog ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2024-21762
- Related
- CVE-2024-21762: Fortinet FortiOS Out-of-Bound Write Vulnerability Known Exploited Vulnerabilities · Feb 09, 2024Hunting for Fortinet's CVE-2024-21762 | Grey Noise Blog Cyber Risks ·Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026