September 2024: Latest Malware, Vulnerabilities and Exploits

Picus Security's August 2024 CTI roundup details multiple high-risk adversary activities and exploited vulnerabilities: critical Apache OFBiz and Jenkins RCEs (CVE-2024-38856, CVE-2024-23897), a Versa Director zero-day exploited by Volt Typhoon (CVE-2024-39717), and a Windows SmartScreen bypass (CVE-2024-38213) used in live attacks; it also covers active APT campaigns (Peach Sandstorm, UAT-5394, Pioneer/Fox Kitten), ransomware incidents (RansomHub/Halliburton), new malware families (Tickler, MoonPeak, VersaMem), sample IOCs and mitigation advice urging immediate patching and hardening.