CVE-2024-21899

creationtimestamp| type| source ---|---|--- 2024-03-08 18:26:57+00:00| seen| https://t.me/ctinow/203490 2024-03-08 18:32:03+00:00| seen| https://t.me/ctinow/203502 2024-03-10 08:00:37+00:00| seen| https://t.me/RussianOSINT/3820 2024-03-11 15:40:05+00:00| seen| https://t.me/truesecator/5506...

CISA Adds Two Known Exploited Vulnerabilities to Catalog

CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2024-23225 Apple iOS and iPadOS Memory Corruption Vulnerability CVE-2024-23296 Apple iOS and iPadOS Memory Corruption Vulnerability These types of vulnerabilities a...

CISA Adds Two Known Exploited Vulnerabilities to Catalog

CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2023-21237 Android Pixel Information Disclosure Vulnerability CVE-2021-36380 Sunhillo SureLine OS Command Injection Vulnerablity These types of vulnerabilities are...

CISA Adds One Known Exploited Vulnerability to Catalog

CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2024-21338 Microsoft Windows Kernel Exposed IOCTL with Insufficient Access Control Vulnerability These types of vulnerabilities are frequent attack vectors for...

#StopRansomware: Phobos Ransomware

Actions to take today to mitigate Phobos ransomware activity: 1. Secure RDP ports to prevent threat actors from abusing and leveraging RDP tools. 2. Prioritize remediating known exploited vulnerabilities. 3. Implement EDR solutions to disrupt threat actor memory allocation techniques...

CVE-2024-1698

creationtimestamp| type| source ---|---|--- 2024-02-27 07:26:48+00:00| seen| https://t.me/ctinow/194050 2024-02-27 07:31:53+00:00| seen| https://t.me/ctinow/194054 2024-03-14 11:21:25+00:00| seen| https://t.me/ctinow/207635 2024-03-15 16:50:07+00:00| seen| https://t.me/arpsyndicate/4228 2024-03-1...

CVE-2024-1212

creationtimestamp| type| source ---|---|--- 2024-02-21 19:21:50+00:00| seen| https://t.me/ctinow/189963 2024-02-22 21:17:34+00:00| seen| https://t.me/arpsyndicate/4053 2024-03-13 10:41:09+00:00| seen| https://t.me/ctinow/206537 2024-03-21 13:36:23+00:00| seen| https://t.me/arpsyndicate/4270...

CVE-2024-25735

creationtimestamp| type| source ---|---|--- 2024-02-14 08:56:57+00:00| seen| https://t.me/ctinow/184476 2024-02-16 12:07:26+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/6613 2024-02-16 15:34:44+00:00| published-proof-of-concept| https://t.me/codeb0ss/1377 2024-02-18 12:31:01+00:0...

Microsoft and Adobe Patch Tuesday, February 2024 Security Update Review

The new Microsoft Patch Tuesday Edition for February 2024 is now live! We invite you to join us to review and discuss the details of these security updates and patches. Microsoft Patch Tuesday for February 2024 Microsoft Patch Tuesdays February 2024 edition addressed 79 vulnerabilities, including...

CISA Adds One Known Exploited Vulnerability to Catalog

CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2023-43770link is external Roundcube Webmail Persistent Cross-Site Scripting XSS Vulnerability These types of vulnerabilities are frequent attack vectors for maliciou...

CISA Adds One Known Exploited Vulnerability to Catalog

CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2023-4762 Google Chromium V8 Type Confusion Vulnerability These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant...

CISA Adds One Known Exploited Vulnerability to Catalog

CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2022-48618 Apple Multiple Products Memory Corruption Vulnerability These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose...

Juniper Networks Releases Urgent Junos OS Updates for High-Severity Flaws

Juniper Networks has released out-of-band updates to address high-severity flaws in SRX Series and EX Series that could be exploited by a threat actor to take control of susceptible systems. The vulnerabilities, tracked as CVE-2024-21619 and CVE-2024-21620, are rooted in the J-Web component and...

CVE-2019-5129

creationtimestamp| type| source ---|---|--- 2024-01-29 09:41:40+00:00| seen| https://t.me/ctinow/175124 2024-11-30 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities - 2024-11-30 2024-12-24 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities ...

CVE-2019-5128

creationtimestamp| type| source ---|---|--- 2024-01-29 09:41:38+00:00| seen| https://t.me/ctinow/175123 2024-12-22 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities - 2024-12-22 2024-12-24 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities ...

CVE-2024-21620

creationtimestamp| type| source ---|---|--- 2024-01-26 00:26:38+00:00| seen| https://t.me/ctinow/173889 2024-01-30 06:04:06+00:00| seen| https://t.me/thehackernews/4472 2024-01-30 06:41:04+00:00| seen| https://t.me/KomunitiSiber/1411 2024-01-30 12:22:47+00:00| seen|...

CISA Adds One Known Exploited Vulnerability to Catalog

CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2023-22527 Atlassian Confluence Data Center and Server Template Injection Vulnerability These types of vulnerabilities are frequent attack vectors for malicious cyber...

CISA Adds One Known Exploited Vulnerability to Catalog

CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2024-23222 Apple Multiple Products Type Confusion Vulnerability These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose...

Attacks, Vulnerabilities and Actors 15 January to 21 January 2024

For a detailed threat digest, download the pdf file here Summary HiveForce Labs has recently made several significant discoveries related to cybersecurity threats. Over the past week, we identified a total of six executed attacks, two instances of adversary activity, and eight exploited...

CVE-2024-0204

creationtimestamp| type| source ---|---|--- 2024-01-22 19:22:23+00:00| seen| https://t.me/ctinow/171373 2024-01-23 22:49:18+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/6481 2024-01-23 23:21:24+00:00| published-proof-of-concept| https://t.me/ctinow/172392 2024-01-24 03:16:10+00:0...