StaryDobry ruins New Year’s Eve, delivering miner instead of presents

Introduction On December 31, cybercriminals launched a mass infection campaign, aiming to exploit reduced vigilance and increased torrent traffic during the holiday season. Our telemetry detected the attack, which lasted for a month and affected individuals and businesses by distributing the XMRi...

CISO's Expert Guide To CTEM And Why It Matters

Cyber threats evolve—has your defense strategy kept up? A new free guide available here explains why Continuous Threat Exposure Management CTEM is the smart approach for proactive cybersecurity. This concise report makes a clear business case for why CTEM's comprehensive approach is the best...

ORing IAP-420

RISK EVALUATION Successful exploitation of these vulnerabilities could allow an attacker to invoke commands to compromise the device via the management interface. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this these...

CVE-2023-49615

Improper input validation in some IntelR System Security Report and System Resources Defense firmware may allow a privileged user to potentially enable escalation of privilege via local access...

Intel System Security Report and System Resources Defense 缓冲区错误漏洞

Intel System Security Report and System Resources Defense is a security report and system resources defense firmware from Intel Corporation USA. Intel System Security Report and System Resources Defense suffers from a buffer error vulnerability that stems from the presence of incorrect buffer...

Intel System Security Report and System Resources Defense 竞争条件问题漏洞

Intel System Security Report and System Resources Defense is a security reporting and system resources defense firmware from Intel Corporation USA. Intel System Security Report and System Resources Defense suffers from a Competitive Condition Issue vulnerability that stems from the presence of a...

Intel System Security Report and System Resources Defense 缓冲区错误漏洞

Intel System Security Report and System Resources Defense is a security report and system resources defense firmware from Intel Corporation USA. Intel System Security Report and System Resources Defense suffers from a buffer error vulnerability that stems from the presence of incorrect buffer...

Intel System Security Report and System Resource Defense 竞争条件问题漏洞

Intel System Security Report and System Resources Defense is a security reporting and system resource defense firmware from Intel Corporation USA. Intel System Security Report and System Resource Defense suffers from a Competitive Condition Issue vulnerability that stems from the presence of a...

Intel System Security Report and System Resource Defense 竞争条件问题漏洞

Intel System Security Report and System Resource Defense is a security reporting and system resource defense firmware from Intel Corporation USA. Intel System Security Report and System Resource Defense suffers from a Competitive Condition Issue vulnerability that stems from the presence of a...

Intel System Security Report and System Resources Defense 输入验证错误漏洞

Intel System Security Report and System Resources Defense is a security reporting and system resources defense firmware from Intel Corporation USA. Intel System Security Report and System Resources Defense suffers from an input validation error vulnerability that stems from the presence of...

PT-2025-6491 · Intel · Intel(R) System Security Report/System Resources Defense

Name of the Vulnerable Software and Affected Versions: IntelR System Security Report and System Resources Defense firmware affected versions not specified Description: A race condition in the IntelR System Security Report and System Resources Defense firmware may allow a privileged user to...

PT-2025-6492 · Intel · Intel(R) System Security Report/System Resources Defense

Name of the Vulnerable Software and Affected Versions: IntelR System Security Report and System Resources Defense firmware affected versions not specified Description: The issue is related to improper input validation in the IntelR System Security Report and System Resources Defense firmware, whi...

PT-2025-6490 · Intel · Intel(R) System Security Report/System Resources Defense

Name of the Vulnerable Software and Affected Versions: IntelR System Security Report and System Resources Defense affected versions not specified Description: A race condition in the firmware may allow a privileged user to potentially enable information disclosure via local access. This issue cou...

PT-2025-6493 · Intel · Intel(R) System Security Report/System Resources Defense

Name of the Vulnerable Software and Affected Versions: IntelR System Security Report and System Resources Defense affected versions not specified Description: The issue is related to improper buffer restrictions in some IntelR System Security Report and System Resources Defense firmware. This cou...

Siemens SCALANCE W700 IEEE 802.11ax

SUMMARY SCALANCE W-700 IEEE 802.11ax family devices are affected by multiple vulnerabilities. Siemens has released new versions for the affected products and recommends to update to the latest versions. 2. GENERAL RECOMMENDATIONS As a general security measure, Siemens strongly recommends to...

CVE-2025-24845

Improper neutralization of argument delimiters in a command 'Argument Injection' issue exists in Defense Platform Home Edition Ver.3.9.51.x and earlier. If an attacker provides specially crafted data to the specific process of the Windows system where the product is running, the system may cause ...

CVE-2025-22890

Execution with unnecessary privileges issue exists in Defense Platform Home Edition Ver.3.9.51.x and earlier. If an attacker performs a specific operation, SYSTEM privilege of the Windows system where the product is running may be obtained...

CVE-2025-22894

Unprotected Windows messaging channel 'Shatter' issue exists in Defense Platform Home Edition Ver.3.9.51.x and earlier. If an attacker sends a specially crafted message to the specific process of the Windows system where the product is running, arbitrary files in the system may be altered. As a...

CVE-2025-20094

Unprotected Windows messaging channel 'Shatter' issue exists in Defense Platform Home Edition Ver.3.9.51.x and earlier. If an attacker sends a specially crafted message to the specific process of the Windows system where the product is running, arbitrary code may be executed with SYSTEM privilege...

CVE-2025-23236

Buffer overflow vulnerability exists in Defense Platform Home Edition Ver.3.9.51.x and earlier. If an attacker performs a specific operation, SYSTEM privilege of the Windows system where the product is running may be obtained...