CISA and Partners Release Call to Action to Close the National Software Understanding Gap

Today, CISA—in partnership with the Defense Advanced Research Projects Agency DARPA, the Office of the Under Secretary of Defense for Research and Engineering OUSD R&E, and the National Security Agency NSA—published Closing the Software Understanding Gap. This report urgently implores the U.S...

CVE-2024-2461

creationtimestamp| type| source ---|---|--- 2025-01-16 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-016-07 2025-03-04 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-063-04...

CVE-2024-2462

creationtimestamp| type| source ---|---|--- 2025-01-16 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-016-06 2025-03-04 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-063-05...

Fuji Electric Alpha5 SMART

RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability, such as: Minimize network exposure for all control...

CVE-2024-8603

creationtimestamp| type| source ---|---|--- 2025-01-15 16:15:58+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfs5z3qpqo2r 2025-01-15 18:35:44+00:00| seen| https://infosec.exchange/users/cR0w/statuses/113833813213553020 2025-01-28 11:00:00+00:00| seen|...

PT-2025-1273

Name of the Vulnerable Software and Affected Versions SimpleHelp versions 5.5.7 and earlier Description SimpleHelp remote support software is affected by multiple path traversal vulnerabilities. These flaws allow unauthenticated remote attackers to download arbitrary files from the SimpleHelp hos...

Patch Tuesday - January 2025

Microsoft is addressing 161 vulnerabilities this January 2025 Patch Tuesday. Microsoft has evidence of in-the-wild exploitation and/or public disclosure for eight of the vulnerabilities published today, with three listed on CISA KEV. This is now the fourth consecutive month where Microsoft has...

CVE-2024-54021

creationtimestamp| type| source ---|---|--- 2025-01-14 14:18:10+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpgxkhsyx2n 2025-01-14 15:13:34+00:00| seen| https://infosec.exchange/users/screaminggoat/statuses/113827355879730690 2025-01-14 15:39:32+00:00| seen|...

CVE-2024-48884

creationtimestamp| type| source ---|---|--- 2025-01-14 14:17:46+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpgwtir7r2r 2025-01-14 15:39:54+00:00| seen| https://t.me/cvedetector/15267 2025-01-14 16:13:27+00:00| seen|...

CVE-2024-46670

creationtimestamp| type| source ---|---|--- 2025-01-14 14:17:34+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpgwige4o2d 2025-01-14 15:11:37+00:00| seen| https://cyberplace.social/users/GossiTheDog/statuses/113827347482732049 2025-01-14 15:11:57+00:00| seen|...

CVE-2024-46665

creationtimestamp| type| source ---|---|--- 2025-01-14 14:17:22+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpgw42mtw2t 2025-01-14 15:13:34+00:00| seen| https://infosec.exchange/users/screaminggoat/statuses/113827355879730690 2025-01-14 15:43:24+00:00| seen|...

Ivanti Releases Security Updates for Multiple Products

Ivanti released security updates to address vulnerabilities in Ivanti Avalanche, Ivanti Application Control Engine, and Ivanti EPM. CISA encourages users and administrators to review the following Ivanti security advisories and apply the necessary guidance and updates: Ivanti Avalanchelink is...

CISA Releases Four Industrial Control Systems Advisories

CISA released four Industrial Control Systems ICS advisories on January 14, 2025. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-25-014-01 Hitachi Energy FOXMAN-UN ICSA-25-014-02 Schneider Electric Vijeo Designer...

Microsoft Releases January 2025 Security Updates

Microsoft released security updates to address vulnerabilities in multiple Microsoft products. A cyber threat actor could exploit some of these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review the following and apply necessary updates:...

CVE-2024-8401

creationtimestamp| type| source ---|---|--- 2025-01-14 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-014-03 2025-01-28 16:42:18+00:00| seen| https://infosec.exchange/users/cve/statuses/113906977232244012 2025-01-28 17:15:56+00:00| seen|...

CVE-2025-0430

creationtimestamp| type| source ---|---|--- 2025-01-14 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-014-04 2025-01-17 17:41:43+00:00| seen| https://infosec.exchange/users/cve/statuses/113844925428063721 2025-01-17 17:57:24+00:00| seen|...

CVE-2024-2011

creationtimestamp| type| source ---|---|--- 2025-01-14 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-014-01 2025-01-30 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-030-01...

CVE-2024-28022

creationtimestamp| type| source ---|---|--- 2025-01-14 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-014-01 2025-01-30 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-030-01...

CVE-2024-28023

creationtimestamp| type| source ---|---|--- 2025-01-14 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-014-01 2025-01-30 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-030-01...

CVE-2024-2012

creationtimestamp| type| source ---|---|--- 2025-01-14 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-014-01 2025-01-30 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-030-01...