Dems demand audit of CVE program as Federal funding remains uncertain
ID: 1bb90ffc-bf62-5c99-b559-0953661f3a09
STIX ID: report--1bb90ffc-bf62-5c99-b559-0953661f3a09
Feed Name: The Register (Security)
Threat Score
**Infosec In Brief:** This roundup reports several active and high-impact threats: a critical Roundcube XSS (CVE-2024-42009) being exploited in the wild, Discord invite-hijacking used to distribute RATs and crypto-stealers, a mortgage-company breach exposing sensitive PII of ~30,000 customers, widespread abuse of the TeamFiltration tool to target Entra ID accounts (~80,000 attempted targets), and a mass JSF*ck-based JavaScript injection campaign infecting over 269,000 webpages.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.