Tag Archive

The Cybersecurity and Infrastructure Security Agency (CISA) has announced the addition of two new vulnerabilities to its Known Exploited Vulnerabilities Catalog. These vulnerabilities in widely used technologies are actively exploited by malicious actors, posing significant risks to federal and private …

Shadowserver has issued a critical warning about the widespread exploitation of Fortinet FortiManager devices using the recently disclosed CVE-2024-47575 vulnerability. With a CVSS score of 9.8/10, this critical flaw allows unauthenticated remote attackers to execute arbitrary code or commands on …

When it comes to protecting your business from increasingly sophisticated cyber threats, a Managed Security Information and Event Management (SIEM) solution is becoming a must-have. It offers advanced threat detection, real-time monitoring, and incident response capabilities, helping organizations stay ahead …

DarkComet, a stealthy Remote Access Trojan, silently infiltrates systems, stealing sensitive data like credentials and passwords. It also acts as a backdoor, enabling attackers to install malware and control infected machines for malicious activities. DarkComet is a Remote Access Trojan …

The Cybersecurity and Infrastructure Security Agency (CISA) has added a new vulnerability to its Known Exploited Vulnerabilities Catalog following evidence of its active exploitation. CVE-2024-38094 vulnerability affects Microsoft SharePoint and is categorized as a deserialization vulnerability. Malicious cyber actors often …

The U.S. Department of State’s Rewards for Justice program has launched a major initiative offering up to $10 million for information on Iranian hackers targeting critical U.S. infrastructure. The reward focuses on the Shahid Hemmat group members operating under Iran’s …

Safe Mode is an operating system diagnostic mode. It is primarily used to troubleshoot issues by loading only essential “drivers” and “services.” In Safe Mode, the system operates with minimal functionality, which makes it easier to “isolate the root causes” …

GitLab has released new patch versions 17.5.1, 17.4.3, and 17.3.6 for both its Community Edition (CE) and Enterprise Edition (EE). These updates address a critical HTML injection vulnerability that could lead to cross-site scripting (XSS) attacks, alongside other security and …

A critical vulnerability has been identified in the Cisco Adaptive Security Appliance (ASA) Software, posing a significant security risk to systems using this software. The flaw allows authenticated remote attackers to execute commands on the operating system with root-level privileges, …

Cisco has disclosed a critical vulnerability in its Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) software that is actively exploited in the wild. The flaw, tracked as CVE-2024-20481, allows unauthenticated, remote attackers to exhaust system resources and cause …