CISA Warning: Akira Ransomware Exploiting Cisco ASA/FTD Vulnerability

The U.S. Cybersecurity and Infrastructure Security Agency CISA on Thursday added a now-patched security flaw impacting Cisco Adaptive Security Appliance ASA and Firepower Threat Defense FTD software to its Known Exploited Vulnerabilities KEV catalog, following reports that it's being likely...

U.S. State Government Network Breached via Former Employee's Account

The U.S. Cybersecurity and Infrastructure Security Agency CISA has revealed that an unnamed state government organization's network environment was compromised via an administrator account belonging to a former employee. "This allowed the threat actor to successfully authenticate to an internal...

CISA Releases Seventeen Industrial Control Systems Advisories

CISA released seventeen Industrial Control Systems ICS advisories on February 15, 2024. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-24-046-01 Siemens SCALANCE W1750D ICSA-24-046-02 Siemens SIDIS Prime ICSA-24-046-0...

Updated: New Software Updates and Mitigations to Defend Against Exploitation of Ivanti Connect Secure and Policy Secure Gateways

Note: CISA will update this Alert with more information as it becomes available. Updated Feb. 15, 2024: On Feb. 14, 2024, Ivanti released new software updates for Ivanti Connect Secure and Ivanti Policy Secure. Review Ivanti's updated KB articlelink is external for more information. End of Feb. 1...

CISA Adds Two Known Exploited Vulnerabilities to Catalog

CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2020-3259 Cisco ASA and FTD Information Disclosure Vulnerability CVE-2024-21410 Microsoft Exchange Server Privilege Escalation Vulnerability These types of...

CVE-2013-0169

creationtimestamp| type| source ---|---|--- 2024-02-15 00:48:21+00:00| seen| https://t.me/marianaalecu/3622 2024-02-15 00:49:09+00:00| seen| https://t.me/endsodomaofficial/7318 2024-02-15 02:55:48+00:00| seen| https://t.me/fucklulzsecisrahell/6294 2024-02-15 03:00:05+00:00| seen|...

CVE-2023-50868

creationtimestamp| type| source ---|---|--- 2024-02-14 17:26:56+00:00| seen| https://t.me/ctinow/184835 2024-02-15 09:16:35+00:00| seen| https://t.me/ctinow/185352 2024-03-06 16:16:29+00:00| seen| https://t.me/ctinow/201478 2024-03-07 18:32:26+00:00| seen| https://t.me/ctinow/202628 2024-04-13...

Microsoft Windows Multiple Vulnerabilities (KB5034767)

This host is missing an important security update according to Microsoft KB5034767 SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

CVE-2023-50387

creationtimestamp| type| source ---|---|--- 2024-02-13 19:36:31+00:00| seen| https://t.me/ctinow/184084 2024-02-14 16:13:10+00:00| seen| https://t.me/itsecnews/4112 2024-02-14 17:26:55+00:00| seen| https://t.me/ctinow/184834 2024-02-15 09:16:36+00:00| seen| https://t.me/ctinow/185353 2024-02-15...

CVE-2023-6516

creationtimestamp| type| source ---|---|--- 2024-02-13 15:22:01+00:00| seen| https://t.me/ctinow/183868 2024-03-04 08:41:24+00:00| seen| https://t.me/ctinow/199080 2024-11-14 12:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-24-319-08...

CVE-2023-5679

creationtimestamp| type| source ---|---|--- 2024-02-13 15:21:59+00:00| seen| https://t.me/ctinow/183866 2024-03-04 08:41:27+00:00| seen| https://t.me/ctinow/199083 2024-11-14 12:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-24-319-08 2025-03-29 00:28:39+00:00| seen|...

CVE-2023-5517

creationtimestamp| type| source ---|---|--- 2024-02-13 15:21:58+00:00| seen| https://t.me/ctinow/183865 2024-03-04 08:41:26+00:00| seen| https://t.me/ctinow/199082 2024-11-14 12:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-24-319-08...

CISA Releases One Industrial Control Systems Advisory

CISA released one Industrial Control Systems ICS advisory on February 13, 2024. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-24-044-01 Mitsubishi Electric MELSEC iQ-R Series Safety CPU and SIL2 Process CPU CISA...

CISA Adds Two Known Exploited Vulnerabilities to Catalog

CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2024-21412 Microsoft Windows Internet Shortcut Files Security Feature Bypass Vulnerability CVE-2024-21351 Microsoft Windows SmartScreen Security Feature Bypass...

Alert: CISA Warns of Active 'Roundcube' Email Attacks - Patch Now

The U.S. Cybersecurity and Infrastructure Security Agency CISA on Monday added a medium-severity security flaw impacting Roundcube email software to its Known Exploited Vulnerabilities KEV catalog, based on evidence of active exploitation. The issue, tracked as CVE-2023-43770 CVSS score: 6.1,...

Siemens RUGGEDCOM APE1808

As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories CERT Services | Services |...

Siemens SCALANCE XCM-/XRM-300

As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories CERT Services | Services |...

Siemens SIDIS Prime

As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories CERT Services | Services |...

Siemens SCALANCE SC-600 Family

As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories CERT Services | Services |...

Siemens SCALANCE W1750D

As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories CERT Services | Services |...