Network Security News Summary for Friday November 10th, 2023

Visualizing Code Injection; SysAid Exploit; WS_FTP Update; CPU-Z Impersonation; pyArrow Vulnerability

Visual Examples of Code Injection
https://isc.sans.edu/diary/Visual%20Examples%20of%20Code%20Injection/30388

SysAid Exploited by Cl0p Ransomware (CVE-2023-47246)

SysAid On-Prem Software CVE-2023-47246 Vulnerability

WS_FTP Server Update CVE-2023-42659
https://community.progress.com/s/article/WS-FTP-Server-Service-Pack-November-2023

Malvertiser copies PC news site to delivery infostealer
https://www.malwarebytes.com/blog/threat-intelligence/2023/11/malvertiser-copies-pc-news-site-to-deliver-infostealer

pyArrow/Apache Arrow Vulnerability
https://lists.apache.org/thread/yhy7tdfjf9hrl9vfrtzo8p2cyjq87v7n

keywords: pyarrow; apache; arrow; cpu-z; malvertiser; google; ws_ftp; moveit; sysaid

source

by Internet Storm Center Stormcast

linux ftp server