CISA Releases Two Industrial Control Systems Advisories

CISA released two Industrial Control Systems ICS advisories on February 27, 2024. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-24-058-01 Mitsubishi Electric Multiple Factory Automation Products ICSMA-24-058-01...

Santesoft Sante DICOM Viewer Pro

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION : Low attack complexity Vendor : Santesoft Equipment : Sante DICOM Viewer Pro Vulnerability : Out-of-Bounds Read 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to disclose information and execute...

CISA, NCSC-UK, and Partners Release Advisory on Russian SVR Actors Targeting Cloud Infrastructure

CISA, in partnership with UK National Cyber Security Centre NCSC and other U.S. and international partners released the joint advisory, SVR Cyber Actors Adapt Tactics for Initial Cloud Access. This advisory provides recent tactics, techniques, and procedures TTPs used by Russian Foreign...

CVE-2024-26596

creationtimestamp| type| source ---|---|--- 2024-02-23 16:32:09+00:00| seen| https://t.me/ctinow/191885 2024-02-23 16:41:51+00:00| seen| https://t.me/ctinow/191909 2025-02-21 14:18:37+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/4899 2025-02-21 22:10:23+00:00| seen|...

CISA Adds One Known Exploited ConnectWise Vulnerability, CVE-2024-1709, to Catalog

CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2024-1709 ConnectWise ScreenConnect Authentication Bypass Vulnerability CISA urges organizations to review the ConnectWise Security Bulletin and apply the necessary...

CISA Releases One Industrial Control Systems Advisory

CISA released one Industrial Control Systems ICS advisory on February 22, 2024. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-24-053-01 Delta Electronics CNCSoft-B DOPSoft CISA encourages users and administrators to...

SploitScan - A Sophisticated Cybersecurity Utility Designed To Provide Detailed Information On Vulnerabilities And Associated Proof-Of-Concept (PoC) Exploits

SploitScan is a powerful and user-friendly tool designed to streamline the process of identifying exploits for known vulnerabilities and their respective exploitation probability. Empowering cybersecurity professionals with the capability to swiftly identify and apply known and test exploits. It'...

Mozilla Releases Security Updates for Firefox and Thunderbird

Mozilla released security updates to address vulnerabilities in Firefox, Firefox ESR, and Thunderbird. A cyber threat actor could exploit one of these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review the following Mozilla Security Advisorie...

CISA Releases Three Industrial Control Systems Advisories

CISA released three Industrial Control Systems ICS advisories on February 20, 2024. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-24-051-01 Commend WS203VICM ICSA-24-051-02 Ethercat Zeek Plugin ICSA-24-051-03...

ICSNPP - Ethercat Zeek Plugin

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION : Exploitable remotely/low attack complexity Vendor : CISA Equipment : Industrial Control Systems Network Protocol Parsers ICSNPP - Ethercat Plugin for Zeek Vulnerabilities : Out-of-bounds Write, Out-of-bounds Read 2. RISK EVALUATION Successful...

CVE-2024-21896

creationtimestamp| type| source ---|---|--- 2024-02-20 03:31:51+00:00| seen| https://t.me/ctinow/188074 2024-02-20 03:32:05+00:00| seen| https://t.me/ctinow/188083 2024-02-21 07:07:23+00:00| seen| https://t.me/arpsyndicate/3711 2024-11-14 12:00:00+00:00| seen|...

CVE-2024-21891

creationtimestamp| type| source ---|---|--- 2024-02-20 03:31:49+00:00| seen| https://t.me/ctinow/188072 2024-02-20 03:32:03+00:00| seen| https://t.me/ctinow/188081 2024-02-21 07:14:13+00:00| seen| https://t.me/arpsyndicate/3717 2024-03-15 11:26:46+00:00| seen| https://t.me/ctinow/208638 2024-11-1...

CVE-2024-21890

creationtimestamp| type| source ---|---|--- 2024-02-20 03:31:48+00:00| seen| https://t.me/ctinow/188071 2024-02-20 03:32:00+00:00| seen| https://t.me/ctinow/188080 2024-02-21 06:47:55+00:00| seen| https://t.me/arpsyndicate/3695 2024-03-15 11:26:48+00:00| seen| https://t.me/ctinow/208641 2024-11-1...

Why keeping track of user accounts is important

CISA the Cybersecurity & Infrastructure Security Agency has issued a cybersecurity advisory after the discovery of documents containing host and user information of a state government organization’s network environment—including metadata—on a dark web brokerage site. An attacker managed to...

CVE-2024-24758

creationtimestamp| type| source ---|---|--- 2024-02-16 23:21:52+00:00| seen| https://t.me/ctinow/186690 2024-02-18 13:21:49+00:00| seen| https://t.me/ctinow/187244 2024-03-08 09:26:18+00:00| seen| https://t.me/ctinow/203166 2024-04-12 05:22:30+00:00| seen| https://t.me/arpsyndicate/4525 2024-11-1...

CVE-2024-21892

creationtimestamp| type| source ---|---|--- 2024-02-16 19:31:51+00:00| seen| https://t.me/ctinow/186592 2024-02-20 03:31:50+00:00| seen| https://t.me/ctinow/188073 2024-02-20 03:32:04+00:00| seen| https://t.me/ctinow/188082 2024-02-21 06:33:54+00:00| seen| https://t.me/arpsyndicate/3685 2024-03-0...

CVE-2024-22019

creationtimestamp| type| source ---|---|--- 2024-02-16 19:02:04+00:00| seen| https://t.me/ctinow/186578 2024-02-20 03:31:52+00:00| seen| https://t.me/ctinow/188075 2024-02-20 03:32:06+00:00| seen| https://t.me/ctinow/188084 2024-02-21 06:53:10+00:00| seen| https://t.me/arpsyndicate/3700 2024-03-0...

CISA Warning: Akira Ransomware Exploiting Cisco ASA/FTD Vulnerability

The U.S. Cybersecurity and Infrastructure Security Agency CISA on Thursday added a now-patched security flaw impacting Cisco Adaptive Security Appliance ASA and Firepower Threat Defense FTD software to its Known Exploited Vulnerabilities KEV catalog, following reports that it's being likely...

U.S. State Government Network Breached via Former Employee's Account

The U.S. Cybersecurity and Infrastructure Security Agency CISA has revealed that an unnamed state government organization's network environment was compromised via an administrator account belonging to a former employee. "This allowed the threat actor to successfully authenticate to an internal...

Updated: New Software Updates and Mitigations to Defend Against Exploitation of Ivanti Connect Secure and Policy Secure Gateways

Note: CISA will update this Alert with more information as it becomes available. Updated Feb. 15, 2024: On Feb. 14, 2024, Ivanti released new software updates for Ivanti Connect Secure and Ivanti Policy Secure. Review Ivanti's updated KB articlelink is external for more information. End of Feb. 1...