ASD’s ACSC, CISA, and US and International Partners Release Guidance on Choosing Secure and Verifiable Technologies

Today, CISA—in partnership with the Australian Signals Directorate Australian Cyber Security Centre ASD ACSC, and other international partners—released updates to a Secure by Design Alert, Choosing Secure and Verifiable Technologieslink is external. Partners that provided recommendations in this...

Bidirectional communication via polyrhythms and shuffles: Without Jon the beat must go on

Welcome to this week's edition of the Threat Source newsletter. Bidirectional communication is foundational to a well-built team regardless of environment. It's critical in information security to be able to drive a conversation up the ladder and down and not lose the critical elements. One of th...

CVE-2024-490508

creationtimestamp| type| source ---|---|--- 2024-11-12 18:54:00+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2024-0435...

TikTok ordered to close Canada offices following “national security review”

The Government of Canada ordered the TikTok Technology Canada Inc. to close its offices in the country following a national security review. This decision was made in accordance with the Investment Canada Act, which allows for the review of foreign investments that may be injurious to Canada’s...

CVE-2024-52013

creationtimestamp| type| source ---|---|--- 2024-11-05 17:13:16+00:00| seen| https://t.me/cvedetector/9884...

Embarking on a Compliance Journey? Here's How Intruder Can Help

Navigating the complexities of compliance frameworks like ISO 27001, SOC 2, or GDPR can be daunting. Luckily, Intruder simplifies the process by helping you address the key vulnerability management criteria these frameworks demand, making your compliance journey much smoother. Read on to understa...

JCDC’s Industry-Government Collaboration Speeds Mitigation of CrowdStrike IT Outage

CISA, through the Joint Cyber Defense Collaborative JCDC, enabled swift, coordinated response and information sharing in the wake of a significant IT outage caused by a CrowdStrike software update. This outage, which impacted government, critical infrastructure, and industry across the globe, led...

CVE-2015-2863

creationtimestamp| type| source ---|---|--- 2024-10-27 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2024-10-27 2024-11-09 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2024-11-09 2025-01-20 00:00:00+00:00| seen| The Shadowserver...

CVE-2020-15498

creationtimestamp| type| source ---|---|--- 2024-10-26 01:48:24+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/1471 2026-07-12 22:00:17+00:00| seen| https://t.me/pleyadesit/7081 2026-07-13 00:00:41+00:00| seen| https://t.me/pleyadesit/7081 2026-07-14 00:00:49+00:00| see...

CVE-2019-19697

creationtimestamp| type| source ---|---|--- 2024-10-14 22:12:13+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/538...

CVE-2019-16692

creationtimestamp| type| source ---|---|--- 2024-10-11 21:55:25+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/451...

CVE-2017-7763

creationtimestamp| type| source ---|---|--- 2024-10-11 21:42:45+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/439...

Abusix and Red Sift Form New Partnership, Leveraging Automation to Mitigate Cyber Attacks

Boston and London, U.S. and U.K., 10th October 2024, CyberNewsWire...

Imposter syndrome in cyber security

TL;DR Imposter syndrome is the belief that you are undeserving of your achievements Anyone can be affected by it There are ways to cope What is imposter syndrome? Imposter syndrome is the psychological pattern in which a person downplays their achievements and believes that they are secretly a...

CVE-2024-9466

creationtimestamp| type| source ---|---|--- 2024-10-09 19:50:18+00:00| seen| https://t.me/cvedetector/7507 2024-10-10 12:00:25+00:00| seen| https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuus24/2024 2024-10-10 13:17:11+00:00| published-proof-of-concept| https://t.me/truesecator/6304 2024-10-1...

CVE-2021-26121

creationtimestamp| type| source ---|---|--- 2024-10-09 19:11:32+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/2705...

Siemens SINEC Security Monitor

As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories CERT Services | Services |...

CVE-2020-27996

creationtimestamp| type| source ---|---|--- 2024-09-28 17:40:10+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/2056...

ESET Cyber Security和ESET Endpoint Antivirus 安全漏洞

ESET Cyber Security and ESET Endpoint Antivirus are both products of ESET Slovakia.ESET Cyber Security is an integrated security suite solution. It is used to proactively eliminate viruses, worms, Trojans, spyware, adware, rootkits, and other attacks brought on by the Internet without affecting...

CVE-2024-7108

Incorrect Authorization vulnerability in National Keep Cyber Security Services CyberMath allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects CyberMath: before CYBM.240816253...