Patch/Configuration Management

Security pros say teams should install the macOS 15.0.1 patch and first run it in a production environment with their security tools to ensure compatibility.

Perfctl, Warm Cookie, Pig Butchering, Ivanti, Zimbra, BabyLockerKZ, AI gone Wild, Aaran Leyland, and More, on this edition of the Security Weekly News.

Ivanti is advising administrators to get up to date on their patches following a new spell of exploits against Endpoint Manager (EPM).

More than 267,000 internet-exposed routers are likely vulnerable to exploitation.

Older, unpatched vulnerabilities remain a risk for organizations.

All NVIDIA Container Toolkit versions up to 1.16.1 and GPU Operator instances up to version 24.6.1 are impacted by the flaw, which stems from the absence of secure containerized GPU isolation from the host that exposes sensitive host file system and access runtime resources to inter-process communication.

Four vulnerabilities in the Common Unix Printing System (CUPS) could allow for RCE.

Attackers can remotely add rogue admin accounts using the authentication bypass flaw.