835 matches found
CISA Releases Advisory on Threat Actors Exploiting CVE-2023-26360 Vulnerability in Adobe ColdFusion
Today, CISA released a Cybersecurity Advisory CSA, Threat Actors Exploit Adobe ColdFusion CVE-2023-26360 for Initial Access to Government Servers, to disseminate known indicators of compromise IOCs and tactics, techniques, and procedures TTPs. The vulnerability in ColdFusion CVE-2023-26360 presen...
CVE-2016-7242
creationtimestamp| type| source ---|---|--- 2023-12-04 04:22:24+00:00| seen| https://t.me/arpsyndicate/1112 2025-02-06 02:42:30+00:00| seen| Telegram/psXgTuU25g9o9GoDdIyB333kYaHa7QQX9pbMSZsyM82keh 2025-02-14 10:00:28+00:00| seen| Telegram/AzEpltXhM-qKwE8827oAchP7-Bkt-ISVLU6IjwHoVJ85Dtm...
PSA: Fake CVE-2023-45124 Phishing Scam Tricks Users Into Installing Backdoor Plugin
The Wordfence Threat Intelligence Team has recently been informed of a phishing campaign targeting WordPress users. The Phishing email claims to be from the WordPress team and warns of a Remote Code Execution vulnerability on the users site with an identifier of CVE-2023-45124, which is not...
iocs
It is an offensive tool for threat intelligence. The repository...
CISA, FBI, MS-ISAC, and ASD’s ACSC Release Advisory on LockBit Affiliates Exploiting Citrix Bleed
Today, the Cybersecurity and Infrastructure Security Agency CISA, Federal Bureau of Investigation FBI, Multi-State Information Sharing & Analysis Center MS-ISAC, and Australian Signals Directorate’s Australian Cyber Security Center ASD’s ACSC released a joint Cybersecurity Advisory CSA,...
CISA Releases Update to Royal Ransomware Advisory
Today, the Federal Bureau of Investigation FBI and the Cybersecurity and Infrastructure Security Agency CISA released an update to joint Cybersecurity Advisory CSA StopRansomware: Royal Ransomware. The updated advisory provides network defenders with additional information on tactics, techniques,...
Exploit for Deserialization of Untrusted Data in Siemens 6Bk1602-0Aa12-0Tp0_Firmware
This is a repository containing operational information regarding the vulnerability in the Log4j logging library CVE-2021-44228. The repository includes information on hunting for exploitation, indicators of compromise IoCs, mitigation, and scanning for the Log4j vulnerability. It also contains a...
CVE-2023-47246: SysAid Zero-Day Vulnerability Exploited By Lace Tempest
On November 8, 2023, IT service management company SysAid disclosed CVE-2023-47426, a zero-day path traversal vulnerability affecting on-premise SysAid servers. According to Microsoft’s threat intelligence team, it has been exploited in the wild by DEV-0950 Lace Tempest in “limited attacks.” In a...
Cybersecurity at a Crossroads: New Implications on Business Risk
During our 2023 Qualys Security Conference QSC taking place in Orlando, Florida, November 6-9, 2023, I unveiled an exciting new milestone for the company – the release of our new Qualys Enterprise TruRisk Platform, marking a seismic shift for the future of Qualys as a leader in managing and...
Apache ActiveMQ vulnerability used in ransomware attacks
On the 27 October, the Apache Software Foundation ASF announced a very serious vulnerability in Apache ActiveMQ that can be used to achieve remote code execution RCE. The Cybersecurity and Infrastructure Security Agency has now added this vulnerability to its Known Exploited Vulnerabilities...
Unit42-Threat-Intelligence-Article-Information
Unit42-Threat-Intelligence-Article-Infor...
Exploit for Incorrect Authorization in Vmware Aria_Operations_For_Logs
CVE-2023-34051 CVE-2023-34051 is an authentication bypass tha...
OPENSUSE-SU-2023:0307-1 Security update for bluetuith
This update for bluetuith fixes the following issues: - Update to 0.1.7: New HJSON-based configuration format Adapter status indicators Cancellable OBEX session creation Enhanced popups Major bugfixes and improvements - Update to 0.1.5: ui: device: Show address if name is empty agent: Display...
PT-2023-35513 · Bluetuith · Bluetuith
Name of the Vulnerable Software and Affected Versions: bluetuith versions prior to 0.1.7 bluetuith versions prior to 0.1.5 Description: The issue is related to a vulnerability in bluetuith that has been resolved by updating dependencies. The updates also include new features and bugfixes, such as...
WordPress Royal Elementor 1.3.78 Shell Upload Vulnerability
Today, on October 16, 2023, the Wordfence Threat Intelligence Team became aware of a vulnerability that was recently patched in Royal Elementor Addons and Templates, a WordPress plugin installed on over 200,000 sites, that makes it possible for unauthenticated attackers to upload arbitrary files ...
FBI and CISA Release Update on AvosLocker Advisory
Today, the Federal Bureau of Investigation FBI and the Cybersecurity and Infrastructure Security Agency CISA released a joint Cybersecurity Advisory CSA, StopRansomware: AvosLocker Ransomware Update to disseminate known indicators of compromise IOCs, tactics, techniques, and procedures TTPs, and...
K000137106: HTTP/2 vulnerability CVE-2023-44487
Security Advisory Description The HTTP/2 protocol allows a denial of service server resource consumption because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023. CVE-2023-44487 also known as HTTP/2 Rapid Reset Attack Impact BIG-IP and...
Threat Roundup for September 22 to September 29
Today, Talos is publishing a glimpse into the most prevalent threats weve observed between Sept. 22 and Sept. 29. As with previous roundups, this post isnt meant to be an in-depth analysis. Instead, this post will summarize the threats weve observed by highlighting key behavioral characteristics,...
FBI and CISA Release Advisory on Snatch Ransomware
Today, the Federal Bureau of Investigation FBI and the Cybersecurity and Infrastructure Security Agency CISA released joint Cybersecurity Advisory CSA StopRansomware: Snatch Ransomware, which provides indicators of compromise IOCs and tactics, techniques, and procedures TTPs associated with the...
Identification and Disruption of QakBot Infrastructure
SUMMARY The Cybersecurity and Infrastructure Security Agency CISA and Federal Bureau of Investigation FBI are releasing this joint Cybersecurity Advisory CSA to disseminate QakBot infrastructure indicators of compromise IOCs identified through FBI investigations as of August 2023. On August 25, F...