CISA Adds WhatsUp Gold, MSHTML Vulnerabilities List

Cyble warns that CISA has added two actively exploited vulnerabilities to its Known Exploited Vulnerabilities catalog: CVE-2024-6670 (Progress WhatsUp Gold, critical 9.8, exploited quickly after PoC with observed RCE and 381 internet-exposed instances) and CVE-2024-43461 (MSHTML UI-spoofing used in a chained exploit); organizations are urged to apply vendor patches, check for IOCs, and follow recommended mitigation best practices.