CISA Releases Three Industrial Control Systems Advisories

CISA released three Industrial Control Systems ICS advisories on January 21, 2025. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-25-021-01 Traffic Alert and Collision Avoidance System TCAS II ICSA-25-021-02 Siemens...

CVE-2024-11166

creationtimestamp| type| source ---|---|--- 2025-01-21 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-021-01 2025-01-22 19:02:47+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/2613 2025-01-22 19:15:25+00:00| seen|...

CVE-2024-12054

creationtimestamp| type| source ---|---|--- 2025-01-21 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-021-03 2025-02-13 23:15:42+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3li3sydrc6b2g 2025-02-14 00:35:09+00:00| seen|...

CISA and FBI Release Updated Guidance on Product Security Bad Practices

In partnership with the Federal Bureau of Investigation FBI, CISA released an update to joint guidance Product Security Bad Practices in furtherance of CISA’s Secure by Design initiative. This updated guidance incorporates public comments CISA received in response to a Request for Information,...

CVE-2024-12703

creationtimestamp| type| source ---|---|--- 2025-01-17 10:33:26+00:00| seen| https://infosec.exchange/users/cve/statuses/113843241325152499 2025-01-17 10:57:03+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/2118 2025-01-17 11:15:28+00:00| seen|...

CVE-2024-10497

creationtimestamp| type| source ---|---|--- 2025-01-17 10:33:25+00:00| seen| https://infosec.exchange/users/cve/statuses/113843241275511437 2025-01-17 10:57:02+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/2117 2025-01-17 11:15:21+00:00| seen|...

CVE-2024-10498

creationtimestamp| type| source ---|---|--- 2025-01-17 10:33:25+00:00| seen| https://infosec.exchange/users/cve/statuses/113843241291825195 2025-01-17 10:57:01+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/2116 2025-01-17 11:15:23+00:00| seen|...

CVE-2024-12142

creationtimestamp| type| source ---|---|--- 2025-01-17 10:22:17+00:00| seen| https://infosec.exchange/users/cve/statuses/113843197471243477 2025-01-17 10:57:03+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/2119 2025-01-17 11:15:26+00:00| seen|...

CVE-2024-11425

creationtimestamp| type| source ---|---|--- 2025-01-17 09:04:43+00:00| seen| https://infosec.exchange/users/cve/statuses/113842892528607736 2025-01-17 09:15:29+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfwhh2h46c2r 2025-01-17 09:44:00+00:00| seen|...

CISA Releases Twelve Industrial Control Systems Advisories

CISA released twelve Industrial Control Systems ICS advisories on January 16, 2025. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-25-016-01 Siemens Mendix LDAP ICSA-25-016-02 Siemens Industrial Edge Management...

CISA and Partners Release Call to Action to Close the National Software Understanding Gap

Today, CISA—in partnership with the Defense Advanced Research Projects Agency DARPA, the Office of the Under Secretary of Defense for Research and Engineering OUSD R&E, and the National Security Agency NSA—published Closing the Software Understanding Gap. This report urgently implores the U.S...

CISA Adds One Known Exploited Vulnerability to Catalog

CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2024-50603link is external Aviatrix Controllers OS Command Injection Vulnerability These types of vulnerabilities are frequent attack vectors for malicious cyber acto...

CVE-2024-2461

creationtimestamp| type| source ---|---|--- 2025-01-16 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-016-07 2025-03-04 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-063-04...

CVE-2024-2462

creationtimestamp| type| source ---|---|--- 2025-01-16 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-016-06 2025-03-04 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-063-05...

Fuji Electric Alpha5 SMART

RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability, such as: Minimize network exposure for all control...

CVE-2024-8603

creationtimestamp| type| source ---|---|--- 2025-01-15 16:15:58+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfs5z3qpqo2r 2025-01-15 18:35:44+00:00| seen| https://infosec.exchange/users/cR0w/statuses/113833813213553020 2025-01-28 11:00:00+00:00| seen|...

PT-2025-1273

Name of the Vulnerable Software and Affected Versions SimpleHelp versions 5.5.7 and earlier Description SimpleHelp remote support software is affected by multiple path traversal vulnerabilities. These flaws allow unauthenticated remote attackers to download arbitrary files from the SimpleHelp hos...

Patch Tuesday - January 2025

Microsoft is addressing 161 vulnerabilities this January 2025 Patch Tuesday. Microsoft has evidence of in-the-wild exploitation and/or public disclosure for eight of the vulnerabilities published today, with three listed on CISA KEV. This is now the fourth consecutive month where Microsoft has...

CVE-2024-54021

creationtimestamp| type| source ---|---|--- 2025-01-14 14:18:10+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpgxkhsyx2n 2025-01-14 15:13:34+00:00| seen| https://infosec.exchange/users/screaminggoat/statuses/113827355879730690 2025-01-14 15:39:32+00:00| seen|...

CVE-2024-48884

creationtimestamp| type| source ---|---|--- 2025-01-14 14:17:46+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpgwtir7r2r 2025-01-14 15:39:54+00:00| seen| https://t.me/cvedetector/15267 2025-01-14 16:13:27+00:00| seen|...