Week of May 27, 2024: CISA Adds Four Exploited CVEs While CISO Moves Hit Synechron, ZeroFox

Security leaders watched CISA add four actively exploited vulnerabilities to its Known Exploited Vulnerabilities Catalog and publish eight separate Industrial Control Systems advisories between May 28 and May 30, 2024. The same week, SecurityWeek's industry-moves column recorded a cluster of security leadership changes, including a new CISO at Synechron and a CEO transition at ZeroFox.

CISA Publishes Seven ICS Advisories Spanning Energy, Manufacturing and Medical Devices

CISA published seven Industrial Control Systems advisories on May 30, 2024, covering LenelS2 NetBox, Fuji Electric Monitouch V-SFT, Inosoft VisiWin, Westermo EDW-100, an updated Mitsubishi Electric MELSEC iQ-R, iQ-L and MELIPC series advisory, and two Baxter Welch Allyn medical device advisories for its Configuration Tool and Connex Spot Monitor. The agency said the advisories provide current information on security issues, vulnerabilities and exploits surrounding ICS, and it encouraged administrators across affected energy, manufacturing and healthcare environments to review the technical details and apply the listed mitigations. (CISA)

CISA Adds Check Point and Linux Kernel Flaws to Exploited Vulnerabilities Catalog

On May 30, 2024, CISA added CVE-2024-24919, an information disclosure vulnerability in Check Point Quantum Security Gateways, and CVE-2024-1086, a use-after-free vulnerability in the Linux Kernel, to its Known Exploited Vulnerabilities Catalog based on evidence of active exploitation. Under Binding Operational Directive 22-01, Federal Civilian Executive Branch agencies were required to remediate the pair by CISA's due date, and the agency urged all organizations to prioritize patching both flaws as part of routine vulnerability management. (CISA)

Justice AV Solutions Viewer Installer Added to CISA's Exploited Vulnerabilities List

CISA added CVE-2024-4978 to its Known Exploited Vulnerabilities Catalog on May 29, 2024, flagging embedded malicious code found in the Justice AV Solutions (JAVS) Viewer installer, courtroom recording software, as actively exploited. The listing required Federal Civilian Executive Branch agencies, under Binding Operational Directive 22-01, to remediate the compromised installer by CISA's specified deadline, and the agency again urged organizations outside the federal enterprise to treat the installer issue as a priority patching item given its active exploitation. (CISA)

CISA Flags Campbell Scientific Web Server in Single ICS Advisory

CISA released a single Industrial Control Systems advisory on May 28, 2024, addressing the Campbell Scientific CSI Web Server, a product used in environmental and data-logging monitoring deployments. The agency encouraged users and administrators operating the web server to review the advisory for technical details and apply the recommended mitigations, continuing its routine cadence of ICS vulnerability disclosures aimed at operators of industrial and critical infrastructure systems during the final days of May 2024. (CISA)

Chromium V8 Type Confusion Bug Joins CISA's Exploited Vulnerabilities Catalog

CISA added CVE-2024-5274, a type confusion vulnerability in Google Chromium's V8 engine, to its Known Exploited Vulnerabilities Catalog on May 28, 2024, citing evidence of active exploitation. Because the flaw sits in Chromium's engine, it affected multiple browsers built on the codebase. The addition triggered a remediation deadline for Federal Civilian Executive Branch agencies under Binding Operational Directive 22-01, with CISA again urging broader industry adoption of prompt patching for the browser vulnerability. (CISA)

Synechron Names New CISO Amid Wider Week of Security Leadership Shuffles

SecurityWeek's industry-moves roundup for the week of May 27, 2024, recorded several security leadership changes. Digital transformation consulting firm Synechron hired Aaron Momin, who previously served as CISO at Certinia and earlier held a managing director role at PricewaterhouseCoopers, as its new Chief Information Security Officer. The same roundup noted ZeroFox naming David Muse as CEO, Fastly adding Scott Lovett as Chief Revenue Officer effective June 3, and Darktrace preparing to move board member Jill Popelka into the Chief Operating Officer role on June 1. (SecurityWeek)