Security researchers have identified a critical remote code execution vulnerability (CVE-2024-43639) in Microsoft’s KDC Proxy, allowing attackers to gain full control over affected servers. This issue, linked to improper Kerberos response length checks, enables unauthenticated remote code execution. Microsoft patched the flaw in November 2024, highlighting the urgency of timely updates in enterprise settings to mitigate exploitation risks.

Quarter of Australian hospitals lack strong cyber measures
Almost 23% of Australia’s top hospitals lack adequate cybersecurity measures, according to cybersecurity firm Proofpoint. An analysis of 70 hospitals found the strongest level of