CISA Adds One Known Exploited Vulnerability to Catalog

CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation , as confirmed by Fortinet. CVE-2025-24085link is external Apple Multiple Products Use-After-Free Vulnerability These types of vulnerabilities are frequent attack vectors...

CVE-2023-3825

creationtimestamp| type| source ---|---|--- 2025-01-28 22:20:45+00:00| seen| https://infosec.exchange/users/cR0w/statuses/113908308068172337 2025-01-30 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-030-04...

Security Bulletin: IBM App Connect Enterprise is vulnerable to a denial of service due to OpenSSL (CVE-2024-6119, CVE-2024-5535)

Summary IBM App Connect Enterprise is vulnerable to a denial of service due to OpenSSL CVE-2024-6119, CVE-2024-5535 Vulnerability Details CVEID:CVE-2024-6119 DESCRIPTION: OpenSSL is vulnerable to a denial of service, caused by an error when performing certificate name checks e.g., TLS clients...

CISA Under Trump

Jen Easterly is out as the Director of CISA. Read her final interview: There's a lot of unfinished business. We have made an impact through our ransomware vulnerability warning pilot and our pre-ransomware notification initiative, and I'm really proud of that, because we work on preventing somebo...

CISA Releases Seven Industrial Control Systems Advisories

CISA released seven Industrial Control Systems ICS advisories on January 28, 2025. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-25-028-01 B&R Automation Runtime ICSA-25-028-02 Schneider Electric Power Logic...

CVE-2025-0659

creationtimestamp| type| source ---|---|--- 2025-01-28 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-028-05 2025-01-28 16:16:29+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgsu3yan5d2r 2025-01-28 17:02:26+00:00| seen|...

CVE-2025-24481

creationtimestamp| type| source ---|---|--- 2025-01-28 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-028-04 2025-01-28 20:58:31+00:00| seen| https://infosec.exchange/users/cve/statuses/113907984678433445 2025-01-28 21:15:50+00:00| seen|...

CVE-2024-48841

creationtimestamp| type| source ---|---|--- 2025-01-27 20:16:06+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgqqzjt74p27 2025-01-27 20:28:57+00:00| seen| https://infosec.exchange/users/cR0w/statuses/113902206110094531 2025-01-27 21:51:58+00:00| seen|...

CVE-2024-50698

creationtimestamp| type| source ---|---|--- 2025-01-25 00:05:10+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/3041 2025-01-25 02:07:08+00:00| seen| https://t.me/cvedetector/16352 2025-03-13 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-072-12...

CVE-2024-50692

creationtimestamp| type| source ---|---|--- 2025-01-24 23:04:54+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/3040 2025-01-25 02:07:12+00:00| seen| https://t.me/cvedetector/16354 2025-03-13 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-072-12...

CVE-2024-50690

creationtimestamp| type| source ---|---|--- 2025-01-24 23:04:53+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/3039 2025-01-25 02:07:08+00:00| seen| https://t.me/cvedetector/16353 2025-03-13 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-072-12...

CVE-2024-50694

creationtimestamp| type| source ---|---|--- 2025-01-24 23:04:52+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/3038 2025-01-25 02:07:06+00:00| seen| https://t.me/cvedetector/16349 2025-03-13 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-072-12...

CVE-2024-50695

creationtimestamp| type| source ---|---|--- 2025-01-24 23:04:51+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/3036 2025-01-25 02:07:07+00:00| seen| https://t.me/cvedetector/16351 2025-03-13 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-072-12...

CVE-2024-50697

creationtimestamp| type| source ---|---|--- 2025-01-24 23:04:51+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/3037 2025-01-25 02:07:06+00:00| seen| https://t.me/cvedetector/16350 2025-01-27 18:48:14+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/113901810078905700 2025-03-...

CISA Adds One Known Exploited Vulnerability to Catalog

CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2025-23006link is external SonicWall SMA1000 Appliances Deserialization Vulnerability These types of vulnerabilities are frequent attack vectors for malicious cyber...

CISA Adds Five-Year-Old jQuery XSS Flaw to Exploited Vulnerabilities List

The U.S. Cybersecurity and Infrastructure Security Agency CISA on Thursday placed a now-patched security flaw impacting the popular jQuery JavaScript library to its Known Exploited Vulnerabilities KEV catalog, based on evidence of active exploitation. The medium-severity vulnerability is...

CISA Releases Six Industrial Control Systems Advisories

CISA released six Industrial Control Systems ICS advisories on January 23, 2025. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-25-023-01 mySCADA myPRO Manager ICSA-25-023-02 Hitachi Energy RTU500 Series Product...

CISA Adds One Known Exploited Vulnerability to Catalog

CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2020-11023link is external JQuery Cross-Site Scripting XSS Vulnerability These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pos...

Under Trump, US Cyberdefense Loses Its Head

Chinese hacks, rampant ransomware, and Donald Trump’s budget cuts all threaten US security. In an exit interview with WIRED, former CISA head Jen Easterly argues for her agency’s survival...

CVE-2024-2617

creationtimestamp| type| source ---|---|--- 2025-01-23 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-023-02 2026-02-14 11:56:07+00:00| seen| https://bsky.app/profile/ravirockks.bsky.social/post/3mesxnxujp72v 2026-02-14 11:56:08+00:00| seen|...