Cyber Intruders Exploit Qlik Sense, Unraveling the Cactus Conundrum

Picture this: Qlik discovers two flaws, named CVE-2023-41265 and CVE-2023-41266, in late August. Fast forward a month, and whoopsie-daisy, they find out one of the patches didn’t do its job properly, giving birth to another problem child called CVE-2023-48365. Luckily, Qlik got their act together, patched things up, and sent out the fixes. Crisis averted, right?