The Internet of Things (IoT) has seamlessly woven itself into our homes and workplaces. From smart thermostats and security cameras to digital picture frames and coffee makers, these devices make life convenient – but they also open hidden backdoors for cyber threats.
As a business owner, you’re always looking to streamline processes, protect your assets, and reduce unnecessary risks. But what happens when one of your most trusted financial practices—sending checks via mail—becomes one of your biggest vulnerabilities? Unfortunately, that’s the reality businesses across the U.S. are now facing.
Your Business Solutions (YBS) is issuing a security alert regarding a critical Zyxel vulnerability that could significantly impact network security. This improper privilege management vulnerability, identified as CVE-2024-12398 with a CVSS score of 8.8, affects the web management interface of specific Zyxel firmware versions: WBE530 (up to 7.00(ACLE.3)) and WBE660S (up to 6.70(ACGG.2)).
Understanding the Risk
This vulnerability enables an authenticated user with limited privileges to escalate their access to administrator-level privileges.
Your Business Solutions urges all organizations using FortiOS and FortiProxy to address a newly discovered Fortinet security vulnerability (CVE-2024-55591), which affects Fortinet products. This high-severity flaw, rated with a CVSS score of 9.6, can allow attackers to gain super-admin privileges through crafted requests to the Node.
At Your Business Solutions, we are committed to keeping your business informed about potential security threats. We want to bring your attention to a recently identified vulnerability in Microsoft Purview, which could have posed a significant risk to sensitive information.
At Your Business Solutions, your security is our top priority. We want to alert you to two critical Ivanti vulnerabilities recently discovered in Ivanti Connect Secure, Policy Secure, and Neurons for ZTA gateways. These vulnerabilities, if left unaddressed, allow remote, unauthenticated attackers to exploit affected devices, leading to potential remote code execution, unauthorized data access, and full network compromise.
Recent discoveries of two severe Windows Server vulnerabilities, CVE-2024-49112 and CVE-2024-49113, are raising alarms for businesses across Texas. These vulnerabilities, which could allow remote attackers to crash servers or execute malicious code, are a stark reminder of the evolving threat landscape.
Cybersecurity threats are escalating, and the recently identified Fortinet FortiWLM vulnerability (CVE-2023-34990) is a stark reminder of the importance of staying vigilant. This critical vulnerability, which carries a CVSS score of 9.6, affects Fortinet's Wireless LAN Manager (FortiWLM) systems and demands immediate action to protect your business.
Your Business Solutions is issuing a warning about a critical Cleo software security vulnerability (CVE-2024-50623) that impacts the following products:
Cleo Harmony® (versions prior to 5.8.0.23)
Cleo VLTrader® (versions prior to 5.8.0.23)
Cleo LexiCom® (versions prior to 5.8.0.23)
While Cleo has released a patch for this issue, the patch is currently incomplete and may allow attackers to bypass it.
Your Business Solutions is issuing an urgent warning about two critical vulnerabilities in Veeam’s Service Provider Console (VSPC). These vulnerabilities, if left unaddressed, could allow attackers to gain control of the VSPC server, potentially compromising your network and data backups.
