ZERO-DAY ALERT: LACE TEMPEST EXPLOITS SYSAID IT SUPPORT SOFTWARE VULNERABILITY

Summary from the TLDR InfoSec newsletter

Lace Tempest, a threat actor known for distributing the Cl0p ransomware, has been exploiting a zero-day flaw in SysAid IT support software. Tracked as CVE-2023-47246, this is a path traversal vulnerability that allows for code execution in on-premise installations. SysAid has released a patch for the flaw in version 23.3.36 of the software.