CISA Adds One Known Exploited Vulnerability to Catalog

CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2024-21338 Microsoft Windows Kernel Exposed IOCTL with Insufficient Access Control Vulnerability These types of vulnerabilities are frequent attack vectors for...

#StopRansomware: Phobos Ransomware

Actions to take today to mitigate Phobos ransomware activity: 1. Secure RDP ports to prevent threat actors from abusing and leveraging RDP tools. 2. Prioritize remediating known exploited vulnerabilities. 3. Implement EDR solutions to disrupt threat actor memory allocation techniques...

CVE-2024-1698

creationtimestamp| type| source ---|---|--- 2024-02-27 07:26:48+00:00| seen| https://t.me/ctinow/194050 2024-02-27 07:31:53+00:00| seen| https://t.me/ctinow/194054 2024-03-14 11:21:25+00:00| seen| https://t.me/ctinow/207635 2024-03-15 16:50:07+00:00| seen| https://t.me/arpsyndicate/4228 2024-03-1...

CVE-2024-1212

creationtimestamp| type| source ---|---|--- 2024-02-21 19:21:50+00:00| seen| https://t.me/ctinow/189963 2024-02-22 21:17:34+00:00| seen| https://t.me/arpsyndicate/4053 2024-03-13 10:41:09+00:00| seen| https://t.me/ctinow/206537 2024-03-21 13:36:23+00:00| seen| https://t.me/arpsyndicate/4270...

CVE-2024-25735

creationtimestamp| type| source ---|---|--- 2024-02-14 08:56:57+00:00| seen| https://t.me/ctinow/184476 2024-02-16 12:07:26+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/6613 2024-02-16 15:34:44+00:00| published-proof-of-concept| https://t.me/codeb0ss/1377 2024-02-18 12:31:01+00:0...

Microsoft and Adobe Patch Tuesday, February 2024 Security Update Review

The new Microsoft Patch Tuesday Edition for February 2024 is now live! We invite you to join us to review and discuss the details of these security updates and patches. Microsoft Patch Tuesday for February 2024 Microsoft Patch Tuesdays February 2024 edition addressed 79 vulnerabilities, including...

CISA Adds One Known Exploited Vulnerability to Catalog

CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2023-43770link is external Roundcube Webmail Persistent Cross-Site Scripting XSS Vulnerability These types of vulnerabilities are frequent attack vectors for maliciou...

CISA Adds One Known Exploited Vulnerability to Catalog

CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2023-4762 Google Chromium V8 Type Confusion Vulnerability These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant...

CISA Adds One Known Exploited Vulnerability to Catalog

CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2022-48618 Apple Multiple Products Memory Corruption Vulnerability These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose...

Juniper Networks Releases Urgent Junos OS Updates for High-Severity Flaws

Juniper Networks has released out-of-band updates to address high-severity flaws in SRX Series and EX Series that could be exploited by a threat actor to take control of susceptible systems. The vulnerabilities, tracked as CVE-2024-21619 and CVE-2024-21620, are rooted in the J-Web component and...

CVE-2019-5129

creationtimestamp| type| source ---|---|--- 2024-01-29 09:41:40+00:00| seen| https://t.me/ctinow/175124 2024-11-30 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities - 2024-11-30 2024-12-24 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities ...

CVE-2019-5128

creationtimestamp| type| source ---|---|--- 2024-01-29 09:41:38+00:00| seen| https://t.me/ctinow/175123 2024-12-22 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities - 2024-12-22 2024-12-24 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities ...

CVE-2024-21620

creationtimestamp| type| source ---|---|--- 2024-01-26 00:26:38+00:00| seen| https://t.me/ctinow/173889 2024-01-30 06:04:06+00:00| seen| https://t.me/thehackernews/4472 2024-01-30 06:41:04+00:00| seen| https://t.me/KomunitiSiber/1411 2024-01-30 12:22:47+00:00| seen|...

CISA Adds One Known Exploited Vulnerability to Catalog

CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2023-22527 Atlassian Confluence Data Center and Server Template Injection Vulnerability These types of vulnerabilities are frequent attack vectors for malicious cyber...

CISA Adds One Known Exploited Vulnerability to Catalog

CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2024-23222 Apple Multiple Products Type Confusion Vulnerability These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose...

Attacks, Vulnerabilities and Actors 15 January to 21 January 2024

For a detailed threat digest, download the pdf file here Summary HiveForce Labs has recently made several significant discoveries related to cybersecurity threats. Over the past week, we identified a total of six executed attacks, two instances of adversary activity, and eight exploited...

CVE-2024-0204

creationtimestamp| type| source ---|---|--- 2024-01-22 19:22:23+00:00| seen| https://t.me/ctinow/171373 2024-01-23 22:49:18+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/6481 2024-01-23 23:21:24+00:00| published-proof-of-concept| https://t.me/ctinow/172392 2024-01-24 03:16:10+00:0...

CVE-2024-0778

creationtimestamp| type| source ---|---|--- 2024-01-22 17:31:27+00:00| seen| https://t.me/ctinow/171315 2024-01-30 18:17:15+00:00| seen| https://t.me/ctinow/176149 2024-02-16 08:46:19+00:00| seen| https://t.me/ctinow/186191 2024-08-09 22:25:27+00:00| published-proof-of-concept|...

CISA Adds One Known Exploited Vulnerability to Catalog

CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2023-35082 Ivanti Endpoint Manager Mobile EPMM and MobileIron Core Authentication Bypass Vulnerability These types of vulnerabilities are frequent attack vectors for...

CVE-2023-5914

creationtimestamp| type| source ---|---|--- 2024-01-17 22:27:02+00:00| seen| https://t.me/ctinow/169488 2024-02-06 08:41:18+00:00| seen| https://t.me/ctinow/179835 2024-03-16 08:53:38+00:00| seen| https://t.me/CNArsenal/2127 2024-03-16 19:41:57+00:00| seen|...