CVE-2024-12198

creationtimestamp| type| source ---|---|--- 2024-12-17 17:36:54+00:00| seen| https://t.me/cvedetector/13108 2024-12-19 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1709/ 2025-03-10 04:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-113/...

CVE-2024-12194

creationtimestamp| type| source ---|---|--- 2024-12-17 17:36:53+00:00| seen| https://t.me/cvedetector/13106 2024-12-19 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1706/...

CVE-2024-12197

creationtimestamp| type| source ---|---|--- 2024-12-17 17:36:53+00:00| seen| https://t.me/cvedetector/13107 2024-12-19 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1708/...

CVE-2024-12670

creationtimestamp| type| source ---|---|--- 2024-12-17 17:36:46+00:00| seen| https://t.me/cvedetector/13101 2024-12-19 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1701/...

CVE-2024-12671

creationtimestamp| type| source ---|---|--- 2024-12-17 17:36:45+00:00| seen| https://t.me/cvedetector/13100 2024-12-19 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1702/...

CVE-2024-11422

creationtimestamp| type| source ---|---|--- 2024-12-17 15:20:17+00:00| seen| https://infosec.exchange/users/cve/statuses/113668837672027134 2024-12-17 17:37:00+00:00| seen| https://t.me/cvedetector/13111 2024-12-19 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1699/...

The Mask APT Resurfaces with Sophisticated Multi-Platform Malware Arsenal

A little-known cyber espionage actor known as The Mask has been linked to a new set of attacks targeting an unnamed organization in Latin America twice in 2019 and 2022. "The Mask APT is a legendary threat actor that has been performing highly sophisticated attacks since at least 2007," Kaspersky...

PT-2024-10058

Name of the Vulnerable Software and Affected Versions BeyondTrust Privileged Remote Access PRA and Remote Support RS versions prior to 24.3.1 PostgreSQL affected versions not specified Description A critical command injection vulnerability exists in BeyondTrust Privileged Remote Access PRA and...

Careto is back: what’s new after 10 years of silence?

During the first week of October, Kaspersky took part in the 34th Virus Bulletin International Conference, one of the longest-running cybersecurity events. There, our researchers delivered multiple presentations, and one of our talks focused on newly observed activities by the Careto threat actor...

CVE-2024-12553

creationtimestamp| type| source ---|---|--- 2024-12-12 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1682/ 2024-12-14 00:58:32+00:00| seen| https://t.me/cvedetector/12905...

CVE-2024-54500

creationtimestamp| type| source ---|---|--- 2024-12-12 00:14:10+00:00| seen| https://infosec.exchange/users/cve/statuses/113636963130468376 2024-12-12 06:24:04+00:00| seen| https://infosec.exchange/users/vuldb/statuses/113638417612658147 2025-03-18 04:00:00+00:00| seen|...

CVE-2024-54501

creationtimestamp| type| source ---|---|--- 2024-12-12 00:14:10+00:00| seen| https://infosec.exchange/users/cve/statuses/113636963145001217 2025-03-18 04:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-170/...

CVE-2024-54486

creationtimestamp| type| source ---|---|--- 2024-12-11 23:59:09+00:00| seen| https://infosec.exchange/users/cve/statuses/113636904055458729 2025-03-18 04:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-166/...

Modular Java Backdoor Dropped in Cleo Exploitation Campaign

Many thanks to Rapid7 MDR and incident response teams for their contributions to this analysis. While investigating incidents related to Cleo software exploitation, Rapid7 Labs and MDR observed a novel, multi-stage attack that deploys an encoded Java Archive JAR payload. Our investigation reveale...

U.S. Charges Chinese Hacker for Exploiting Zero-Day in 81,000 Sophos Firewalls

The U.S. government on Tuesday unsealed charges against a Chinese national for allegedly breaking into thousands of Sophos firewall devices globally in 2020. Guan Tianfeng aka gbigmao and gxiaomao, who is said to have worked at Sichuan Silence Information Technology Company, Limited, has been...

CVE-2024-12550

creationtimestamp| type| source ---|---|--- 2024-12-11 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1678/ 2025-02-11 20:16:05+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhwhzcxzde2a 2025-02-20 23:26:55+00:00| seen|...

CVE-2024-12548

creationtimestamp| type| source ---|---|--- 2024-12-11 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1680/ 2025-02-11 20:15:59+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhwhz5vmwk2c...

CVE-2024-11949

creationtimestamp| type| source ---|---|--- 2024-12-11 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1672/ 2024-12-11 21:58:36+00:00| seen| https://infosec.exchange/users/cve/statuses/113636430016828724 2024-12-12 02:56:45+00:00| seen| https://t.me/cvedetector/12664...

CVE-2024-12549

creationtimestamp| type| source ---|---|--- 2024-12-11 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1679/ 2025-02-11 20:16:02+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhwhzaf5ug2a...

Patch Tuesday, December 2024 Edition

Microsoft today released updates to plug at least 70 security holes in Windows and Windows software, including one vulnerability that is already being exploited in active attacks. The zero-day seeing exploitation involves CVE-2024-49138, a security weakness in the Windows Common Log File System...