Vulnerability fixed in Gladinet CentreStack

Gladinet has fixed a vulnerability in CentreStack Versions up to 16.1.10296.56315. The vulnerability is in the way hard-coded machineKeys and cryptographic keys are used, resulting in a serious deserialization vulnerability. The vulnerability allows a malicious party to generate rogue ViewState...

Gamaredon Uses Infected Removable Drives to Breach Western Military Mission in Ukraine

The Russia-linked threat actor known as Gamaredon aka Shuckworm has been attributed to a cyber attack targeting a foreign military mission based in Ukraine with an aim to deliver an updated version of a known malware called GammaSteel. The group targeted the military mission of a Western country,...

CVE-2024-58136

creationtimestamp| type| source ---|---|--- 2025-04-10 03:40:18+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3lmglg4gkjf2g 2025-04-10 04:12:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmgn76pwco2q 2025-04-10 05:48:31+00:00| seen|...

Man accused of using keylogger to spy on colleagues, log in to their personal accounts and watch them at home

When you next type something sensitive on your computer keyboard, be sure that no-one else is watching. A recent case of alleged cyber-voyeurism shows how important it is to secure your computer against unwanted eavesdroppers using malwareware. In a class action lawsuit, six women have accused...

The Database Kill Chain

Cyber Threat Modeling Frameworks Modern attacks targeting sensitive data have become complex. An organization with many assets might be lost when trying to assess its overall risk, understand the pain points and prioritize the tasks required to secure its information systems. Cyber threat modelin...

Qt Group Authorized as a CVE Numbering Authority (CNA) by the CVE Program

Qt Group has been authorized by the Common Vulnerabilities and Exposures CVE® Program as a CVE Numbering Authority CNA, covering all Qt products. It is a significant milestone on Qt’s cybersecurity strategy and aligns with our commitment to robust vulnerability management processes and practices...

PT-2025-15775 · Unknown · Ultra Demo Importer

Name of the Vulnerable Software and Affected Versions: Ultra Demo Importer versions 1.0.5 and earlier Description: A Cross-Site Request Forgery CSRF issue allows attackers to upload a web shell to a web server. This enables potential cyber threats, including server compromise. Recommendations: Fo...

PT-2025-22415 · Automationdirect · Mb-Gateway

Name of the Vulnerable Software and Affected Versions: AutomationDirect MB-Gateway affected versions not specified Description: The embedded web server lacks authentication and access controls, allowing unrestricted remote access. This could lead to configuration changes, operational disruption, ...

PT-2025-16023 · Dell · Dell Powerprotect Cyber Recovery

Name of the Vulnerable Software and Affected Versions: Dell PowerProtect Cyber Recovery versions prior to 19.18.0.2 Description: The issue concerns an Insertion of Sensitive Information Into Sent Data. A high privileged attacker with remote access could potentially exploit this, leading to...

CVE-2024-2890

creationtimestamp| type| source ---|---|--- 2025-04-08 21:40:13+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3lmdgtd73sc2g...

CVE-2025-277527

creationtimestamp| type| source ---|---|--- 2025-04-08 16:50:53+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2025-0107...

CVE-2025-298237

creationtimestamp| type| source ---|---|--- 2025-04-08 16:50:53+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2025-0107...

CVE-2025-32020

creationtimestamp| type| source ---|---|--- 2025-04-08 16:40:22+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3lmcw35rwey2c...

UAC-0226 Deploys GIFTEDCROOK Stealer via Malicious Excel Files Targeting Ukraine

The Computer Emergency Response Team of Ukraine CERT-UA has revealed a new set of cyber attacks targeting Ukrainian institutions with information-stealing malware. The activity is aimed at military formations, law enforcement agencies, and local self-government bodies, particularly those located...

CTEM + CREM: Aligning Your Cybersecurity Strategy

Cyber threats evolve daily, and organizations need to move beyond traditional security approaches to stay ahead. That’s why Continuous Threat Exposure Management CTEM, a concept introduced by Gartner, has been gaining traction. CTEM isn’t just another cybersecurity buzzword; it’s a structured,...

CVE-2025-31173

creationtimestamp| type| source ---|---|--- 2025-04-07 05:48:54+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114295107323797874 2025-04-07 06:32:02+00:00| published-proof-of-concept| Telegram/EsnBsJ3Ssj-UYUC8Y7f1dDSxyldCCaK6EjJlv4mvyH2MMw 2025-04-07 07:17:46+00:00| seen|...

CVE-2025-3259

creationtimestamp| type| source ---|---|--- 2025-04-04 17:36:07+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/10504 2025-04-04 18:16:35+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114281060422401284 2025-04-04 18:16:35+00:00| seen|...

AI Threats Are Evolving Fast — Learn Practical Defense Tactics in this Expert Webinar

The rules have changed. Again. Artificial intelligence is bringing powerful new tools to businesses. But it's also giving cybercriminals smarter ways to attack. They're moving quicker, targeting more precisely, and slipping past old defenses without being noticed. And here's the harsh truth: If...

CVE-2025-2055

creationtimestamp| type| source ---|---|--- 2025-04-03 06:34:17+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10170 2025-04-03 07:06:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3llvdotdiq32k 2025-04-03 09:22:46+00:00| seen| https://t.me/cvedetector/21945...

Preview the Action: Two New Sessions Available Before Take Command 2025

Take Command 2025 is packed with insights from cybersecurity experts, threat intelligence leaders, and hands-on practitioners. But you don’t have to wait until April 9 to start learning. Two exclusive sessions are now available on-demand — giving you early access to critical content designed to...