CVE-2024-45064

creationtimestamp| type| source ---|---|--- 2025-04-02 14:00:07+00:00| seen| https://infosec.place/objects/f5fd88e3-5f3c-4adc-aab0-6b566d96b1f5 2025-04-02 14:00:07+00:00| seen| https://infosec.place/objects/f5fd88e3-5f3c-4adc-aab0-6b566d96b1f5 2025-04-02 15:48:32+00:00| seen|...

How SSL Misconfigurations Impact Your Attack Surface

When assessing an organization's external attack surface, encryption-related issues especially SSL misconfigurations receive special attention. Why? Their widespread use, configuration complexity, and visibility to attackers as well as users make them more likely to be exploited. This highlights...

CVE-2024-13553

creationtimestamp| type| source ---|---|--- 2025-04-01 11:34:31+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/9873 2025-04-01 12:40:17+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3llqvfffeth2v 2025-04-01 13:48:33+00:00| seen|...

China-Linked Earth Alux Uses VARGEIT and COBEACON in Multi-Stage Cyber Intrusions

Cybersecurity researchers have shed light on a new China-linked threat actor called Earth Alux that has targeted various key sectors such as government, technology, logistics, manufacturing, telecommunications, IT services, and retail in the Asia-Pacific APAC and Latin American LATAM regions. "Th...

PT-2025-14427 · Unknown · M. Tuhin Ultimate Push Notifications

Name of the Vulnerable Software and Affected Versions: M. Tuhin Ultimate Push Notifications versions n/a through 1.1.8 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection...

PT-2025-14064 · Joomsky · Joomsky Js Help Desk

Name of the Vulnerable Software and Affected Versions: JoomSky JS Help Desk versions 2.9.2 and earlier Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows unauthorized SQL commands to be execute...

Available now: 2024 Year in Review

Welcome to Cisco Talos' 2024 Year in Review, available for download now. This report is powered by threat telemetry from over 46 million global devices across 193 countries and regions, amounting to more than 886 billion security events per day. Explore key insights in topics including the top...

CVE-2025-30223

creationtimestamp| type| source ---|---|--- 2025-03-30 11:27:47+00:00| published-proof-of-concept| https://github.com/beego/beego/security/advisories/GHSA-2j42-h78h-q4fg 2025-03-31 16:33:14+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/9693 2025-03-31 17:40:22+00:00|...

SquareX Discloses Browser-Native Ransomware that Puts Millions at Risk

Palo Alto, USA, 29th March 2025, CyberNewsWire...

CVE-2025-30407

Local privilege escalation due to a binary hijacking vulnerability. The following products are affected: Acronis Cyber Protect Cloud Agent Windows before build 39713...

CVE-2025-30365

creationtimestamp| type| source ---|---|--- 2025-03-27 17:40:30+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3llettmrgml2u 2025-03-27 19:09:51+00:00| seen| https://t.me/cvedetector/21319...

CVE-2025-30364

creationtimestamp| type| source ---|---|--- 2025-03-27 17:40:29+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3llettlj43v2s 2025-03-27 19:09:50+00:00| seen| https://t.me/cvedetector/21318...

CVE-2025-30361

creationtimestamp| type| source ---|---|--- 2025-03-27 17:40:27+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3llettkhw7r2v 2025-03-27 19:09:44+00:00| seen| https://t.me/cvedetector/21315...

Unpacking a post-compromise breach simulation with Vector Command

The reality of modern cyber threats In today’s evolving cyber landscape, breaches are not a matter of if , but when. Attackers continue to refine their techniques, using stealthy post-compromise tactics to maintain persistence, escalate privileges, and move laterally across networks. The key to...

New Report Explains Why CASB Solutions Fail to Address Shadow SaaS and How to Fix It

Whether it's CRMs, project management tools, payment processors, or lead management tools - your workforce is using SaaS applications by the pound. Organizations often rely on traditional CASB solutions for protecting against malicious access and data exfiltration, but these fall short for...

CVE-2025-30407

Local privilege escalation due to a binary hijacking vulnerability. The following products are affected: Acronis Cyber Protect Cloud Agent Windows before build 39713...

CVE-2025-30407

Local privilege escalation due to a binary hijacking vulnerability. The following products are affected: Acronis Cyber Protect Cloud Agent Windows before build 39713...

CVE-2025-30407

CVE-2025-30407 describes a local privilege escalation in the Acronis Cyber Protect Cloud Agent (Windows) prior to build 39713, caused by a binary hijacking issue. Publicly reported details in multiple feeds confirm the affected product and version range, as well as the root cause (binary hijackin...

CVE-2025-30407

Local privilege escalation due to a binary hijacking vulnerability. The following products are affected: Acronis Cyber Protect Cloud Agent Windows before build 39713...

New SparrowDoor Backdoor Variants Found in Attacks on U.S. and Mexican Organizations

The Chinese threat actor known as FamousSparrow has been linked to a cyber attack targeting a trade group in the United States and a research institute in Mexico to deliver its flagship backdoor SparrowDoor and ShadowPad. The activity, observed in July 2024, marks the first time the hacking crew...