Threat Intel Update - November 12

To ensure your SAFE platform is assessing risks based on our most recent threat intelligence, SAFE has made the following updates:

• Technique mapping added/updated for 3558 CVEs - Refer List 1.

• Updated CISA KEV CVEs as of 31st October 2024  - Refer List 2.

• CVE registered on NVD as of 31st October 2024.

  • List 3 below indicates CVEs in NVD that have been assessed but may be subject to future review.

Your SAFE score could be affected by these updates if your assets are discovered to be impacted by recently identified CVEs or TTP mappings or if you have existing Controls, CVEs, or TTP mappings that have been modified.

List 1 - CVE Added/Updated - 31st October 2024

List 2 - KEV CVEs Added/Updated

CVE-2024-40711

CVE-2024-38094

CVE-2024-37383

CVE-2024-20481

CVE-2024-9537

CVE-2024-47575

CVE-2024-43047

CVE-2024-43572

CVE-2024-9680

CVE-2024-9379

CVE-2024-45519

CVE-2024-43573

CVE-2024-30088

CVE-2024-28987

CVE-2024-23113

CVE-2024-9380

List 3: CVEs that may be subject to future TTP mapping updates

    None

SAFE Reference:

• TSAR 3.45.5