Daily Brief
Ghostscript RCE flaw and Ivanti zero-day under attack
Cyberr Brief2 stories
Ivanti warns of Connect Secure zero-day exploited in attacks
Ivanti urged customers to immediately patch an actively exploited zero-day in Connect Secure. This matters because remote access gateways are high-value targets and active exploitation means exposure is no longer theoretical.
What to do
BleepingComputer↗Prioritise patching any Ivanti Connect Secure systems and review logs for signs of exploitation, especially on internet-facing appliances.
Ghostscript flaw lets hackers hijack servers via PDF uploads
A critical heap buffer overflow in Ghostscript could allow remote code execution through specially crafted PDF files. This matters because any service that renders user-supplied documents could be turned into a server compromise path.
What to do
BleepingComputer↗Audit any workflow that opens PDF uploads with Ghostscript, and isolate or disable document rendering where it is not essential until fixed.