Tenable Blog

A lack of alignment on COVID-19 response plans exemplifies how a chronic disconnect between cybersecurity and business leaders increases organizational risk. 

With cyberattacks on the rise, a new study shows how a disconnect between cyber and business executives is putting organizations in Mexico at risk. 

The vast majority of organizations in Mexico (95%) suffered at least one business-impacting¹ cyberattack over the past year and nearly three quarters (74%) expect cyberattacks to increase over the next 24 months. 

SaltStack recommends immediate patching after their disclosure of three new vulnerabilities, two of which are rated critical and can be remotely exploited without authentication.

A remote code execution vulnerability in Oracle WebLogic Server has been actively exploited in the wild just one week after a patch was released and one day after a proof of concept was published.

Update October 30, 2020: The solutions section has been updated to reflect the disclosure of a potential bypass of the patch for CVE-2020-14882.

Update November 2, 2020: The solutions section has been updated to reflect the release of a patch to address the potential bypass of the patch for CVE-2020-14482.

State-sponsored actors from Russia and China are leveraging several of the same publicly known vulnerabilities in their attacks, all of which have patches available.