CISA Releases Seven Industrial Control Systems Advisories

CISA released seven Industrial Control Systems ICS advisories on January 28, 2025. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-25-028-01 B&R Automation Runtime ICSA-25-028-02 Schneider Electric Power Logic...

CVE-2025-22865

The ParsePKCS1PrivateKey function in the golang library is vulnerable to a panic when attempting to parse an RSA key that lacks CRT values during well-formedness verification. This vulnerability impacts IBM Storage Ceph (versions 6.0, 6.1z0-z9, 7.0z0-z2, 7.1z0-z6, 8.0z0-z5, and 8.1z0-z1) because ...

CVE-2024-45336 Sensitive headers incorrectly sent after cross-domain redirect in net/http

The HTTP client drops sensitive headers after following a cross-domain redirect. For example, a request to a.com/ containing an Authorization header which is redirected to b.com/ will not send that header to b.com. In the event that the client received a subsequent same-domain redirect, however,...

openSUSE: Security Advisory for the Linux Kernel (Live Patch 24 for SLE 15 SP4) (SUSE-SU-2025:0251-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Stable Channel Update for Desktop

The Stable channel has been updated to 132.0.6834.159/160 for Windows, Mac and 132.0.6834.159 for Linux which will roll out over the coming days/weeks. A full list of changes in this build is available in the Log. The extended stable channel has been updated to 132.0.6834.160 Windows, Mac and wil...

CVE-2025-24158

creationtimestamp| type| source ---|---|--- 2025-01-27 22:19:09+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgqxvlpxgf27 2025-01-28 00:23:35+00:00| seen| https://t.me/cvedetector/16537...

CVE-2025-24145

creationtimestamp| type| source ---|---|--- 2025-01-27 22:18:46+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgqxuvjw652e 2025-01-28 00:59:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lgraumq4ja2e 2025-01-28 08:37:14+00:00| exploited|...

CVE-2025-24126

creationtimestamp| type| source ---|---|--- 2025-01-27 22:18:06+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgqxtpcvbw2j 2025-01-28 16:49:21+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/113907001062853958 2025-01-29 06:19:33+00:00| seen|...

CVE-2025-24112

creationtimestamp| type| source ---|---|--- 2025-01-27 22:17:35+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgqxsrgfm327 2025-01-30 19:19:48+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/3513...

CVE-2025-24094

creationtimestamp| type| source ---|---|--- 2025-01-27 22:17:06+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgqxrvt4xd27...

CVE-2024-54541

creationtimestamp| type| source ---|---|--- 2025-01-27 22:16:33+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgqxqx2fnv2e...

CVE-2024-54488

creationtimestamp| type| source ---|---|--- 2025-01-27 22:15:51+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgqxpooees2c 2025-09-01 19:03:03+00:00| seen| MISP/d0bda5d9-8cbc-4c6c-8803-a5e3150f9ec2...

CVE-2024-44172

creationtimestamp| type| source ---|---|--- 2025-01-27 22:15:41+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgqxpeqlos2b 2025-01-30 17:19:44+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/3494...

CVE-2025-0751

creationtimestamp| type| source ---|---|--- 2025-01-27 20:16:09+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgqqznqkhv2n 2025-01-27 21:51:58+00:00| seen| https://t.me/cvedetector/16505 2025-03-02 11:46:29+00:00| seen|...

CVE-2025-24365

creationtimestamp| type| source ---|---|--- 2025-01-27 17:54:07+00:00| seen| https://infosec.exchange/users/cve/statuses/113901597263624137 2025-01-27 18:16:25+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgqkdjn3ep2f 2025-01-27 20:11:24+00:00| seen|...

CVE-2024-54146

creationtimestamp| type| source ---|---|--- 2025-01-27 17:16:00+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgqgxjbb4y2j 2025-01-27 18:55:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lgqmj5oiv62k 2025-01-27 20:11:37+00:00| seen|...

CVE-2024-27256

CVE-2024-27256 affects IBM MQ Container images: CD v3.0.0, v3.0.1, v3.1.0–3.1.3; LTS v2.0.0–2.0.22; and 2.4.0–2.4.8, 2.3.0–2.3.3, 2.2.0–2.2.2. Description: use of weaker than expected cryptographic algorithms could allow an attacker to decrypt highly sensitive information. Connected sources corro...

Royal Mail SMS Phishing Scam Targets Victims with Fake Delivery Fee Requests

Beware of a convincing Royal Mail SMS phishing scam asking for personal details and payment for re-delivery. Learn…...

CVE-2025-24743

creationtimestamp| type| source ---|---|--- 2025-01-27 15:17:25+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgqadhxvw42t 2025-01-27 17:40:41+00:00| seen| https://t.me/cvedetector/16481...

CVE-2025-24734

creationtimestamp| type| source ---|---|--- 2025-01-27 15:17:15+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgqad65re627 2025-01-27 16:48:40+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/113901339674702118 2025-01-27 17:40:35+00:00| seen|...