Latest Threats news

Four CVSS 9.9 remote code execution flaws patched in Veeam Backup and Replication. Authenticated domain users could run arbitrary code on backup servers. Past Veeam vulnerabilities were weaponized by Akira, Fog, and Frag ransomware within weeks of disclosure.

March 9 brought 117 new CVEs but no critical-severity entries. The two worth tracking are an unpatched UltraVNC DLL hijack with a public exploit, and two Tiandy surveillance flaws from a vendor that has ignored disclosures since 2017.