The Cybersecurity and Infrastructure Security Agency (CISA) has added a serious NextGen Healthcare Mirth Connect remote code execution vulnerability to its Known Exploited Vulnerability Catalog. The vulnerability, which affects data interoperability within healthcare systems, enables a threat actor to fully compromise a vulnerable Mirth Connect Server without requiring credentials. Many industry organizations have neglected to upgrade their systems despite a patch being available, leaving them vulnerable to exploitation.
Week in review: NIST updates DNS security guidance, compromised LiteLLM PyPI packages
Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: NIST updates its DNS security guidance for the first time
