Mirai Now Exploits Samsung MagicINFO CMS CVE-2024-7399

The Mirai botnet added a new vulnerability to its arsenal. This vulnerability, a file upload and remote code execution vulnerability in Samsung s MagicInfo 9 CMS, was patched last August but attracted new attention last week after being mostly ignored so far.

https://isc.sans.edu/diary/Mirai+Now+Exploits+Samsung+MagicINFO+CMS+CVE20247399/31920

New Kali Linux Signing Key

The Kali Linux maintainers lost access to the secret key used to sign packages. Users must install a new key that will be used going forward.

https://www.kali.org/blog/new-kali-archive-signing-key/

The Risk of Default Configuration: How Out-of-the-Box Helm Charts Can Breach Your Cluster

Many out-of-the-box Helm charts for Kubernetes applications deploy vulnerable configurations with exposed ports and no authentication

https://techcommunity.microsoft.com/blog/microsoftdefendercloudblog/the-risk-of-default-configuration-how-out-of-the-box-helm-charts-can-breach-your/4409560