Week of November 4, 2024: CISA KEV Additions and Election Day Cybersecurity Assurances

Security leaders tracked CISA's addition of six actively exploited vulnerabilities to its Known Exploited Vulnerabilities Catalog, three new industrial control system advisories, and the opening of Critical Infrastructure Security and Resilience Month, alongside a joint CISA-EAC statement backing state and local election officials ahead of the November 5 vote. Idaho State University and Bugcrowd also named new chief information security officers during the week of November 4, 2024.

CISA Adds Four Actively Exploited Vulnerabilities to KEV Catalog

CISA added four vulnerabilities to its Known Exploited Vulnerabilities Catalog on November 7, 2024, citing evidence of active exploitation. The additions included CVE-2024-43093 affecting Android Framework, CVE-2024-51567 affecting CyberPanel, CVE-2019-16278 affecting Nostromo nhttpd, and CVE-2024-5910 affecting Palo Alto Networks Expedition. Federal civilian agencies faced remediation deadlines under Binding Operational Directive 22-01, and CISA urged all organizations to prioritize patching given the active exploitation evidence tied to these four CVEs. (CISA)

CISA Flags Two PTZOptics Camera Flaws as Exploited

CISA added two vulnerabilities affecting PTZOptics PT30X-SDI/NDI cameras to its Known Exploited Vulnerabilities Catalog on November 4, 2024. CVE-2024-8957 covered an OS command injection flaw, while CVE-2024-8956 covered an authentication bypass issue, both tied to evidence of active exploitation. Federal civilian agencies faced remediation deadlines under Binding Operational Directive 22-01, and CISA again urged broader organizations to fold catalog entries into vulnerability management practices to reduce exposure to ongoing attacks. (CISA)

CISA Publishes Three Industrial Control System Advisories

CISA published three Industrial Control Systems advisories on November 7, 2024, covering Beckhoff Automation TwinCAT Package Manager, Delta Electronics DIAScreen, and Bosch Rexroth IndraDrive. The advisories detailed technical specifics and mitigations for vulnerabilities in the respective products. CISA encouraged administrators of operational technology environments to review the bulletins directly, reflecting continued agency attention to industrial control system exposure during a week when the agency simultaneously expanded its Known Exploited Vulnerabilities Catalog. (CISA)

CISA Opens Critical Infrastructure Security and Resilience Month

CISA announced the kickoff of Critical Infrastructure Security and Resilience Month on November 7, 2024, continuing its theme of Resolve to be Resilient. Dr. David Mussington, CISA's Executive Assistant Director for Infrastructure Security, said, "We must build resilience into our preparedness planning year-around." The agency outlined practices for critical infrastructure organizations, including identifying dependencies, assessing risks, and building incident response plans, framing the effort against ongoing cyber and physical threats facing infrastructure owners and operators across the country. (CISA)

CISA and EAC Back Election Officials Ahead of the Vote

CISA and the U.S. Election Assistance Commission issued a joint statement on November 4, 2024, ahead of the general election, noting that tens of millions of Americans would cast ballots the following day. The statement thanked state and local election officials and echoed assurances from the National Association of Secretaries of State and National Association of State Election Directors that contingency plans existed for operational issues such as late openings or power loss at polling locations. (CISA)

Idaho State University and Bugcrowd Name New CISOs

SecurityWeek's Industry Moves roundup for the week of November 4, 2024, reported that Jared Bartel was named Chief Information Security Officer at Idaho State University after previously serving as Associate CIO of Infrastructure Services there. The same roundup noted that Bugcrowd appointed Trey Ford as Chief Information Security Officer for the Americas, drawing on his prior leadership roles at Deepwatch, Vista Equity Partners, Salesforce, and Black Hat, alongside over a decade on Bugcrowd's advisory board. (SecurityWeek)