Summary
This document is a Threat Highlight Report for March 2024, detailing significant developments in the cyber threat landscape. It outlines the slowdown of zero-day vulnerabilities and highlights ongoing disagreements between organizations regarding responsible disclosure practices, particularly between JetBrains and Rapid7. The report discusses the exploitation of vulnerabilities in JetBrains' TeamCity software, which has been targeted by attackers, leading to concerns about supply chain security. Additionally, it covers vulnerabilities in VMWare products discovered during the Tianfu Cup, which could be exploited in a critical manner when chained together. The report also addresses the conflicting views between CISA and Ivanti regarding the effectiveness of Ivanti's ICS security tools. Furthermore, it mentions political espionage attributed to Chinese state-sponsored actors, including a significant breach of the UK Electoral Commission's database. The report provides a comprehensive view of the current threats and vulnerabilities affecting various sectors.
