CISA Urges Agencies to Patch Critical “Array Networks” Flaw Amid Active Attacks

November 26, 2024 at 12:48AM The U.S. CISA added a critical vulnerability (CVE-2023-28461) affecting Array Networks AG to its KEV catalog due to active exploitation. The flaw allows remote code execution without authentication. Agencies are urged to apply patches by December 16, 2024, as the China-linked group Earth Kasha exploits similar vulnerabilities. ### Meeting Takeaways … Read more