Active attacks found in GitLab and Cisco firewall software

Two vulnerabilities are now being actively exploited in the wild. One affects GitLab's Community and Enterprise editions, the other affects Cisco's Secure Firewall ASA and FTD software. The US cybersecurity agency CISA has added both to its list of known exploited vulnerabilities, which is a reliable indicator that attacks are happening right now, not just theoretically possible.

What this means for your business

If your business runs GitLab for code or project management, or uses Cisco ASA or FTD firewalls, you should treat patching these as urgent rather than something to schedule next month. Check with your IT team or your managed service provider that the latest vendor patches have been applied. Cisco firewalls in particular are common at the network perimeter, so a vulnerability there is a serious exposure.

Reported by CISA. Original headline: CISA Adds Two Known Exploited Vulnerabilities to Catalog. Read the source at cisa.gov. This write-up is ours, not theirs.