WordPress CHATLIVE plugin <= 2.0.1 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Phan Trong Quan - VNPT Cyber Immunity in WordPress Plugin CHATLIVE versions = 2.0.1...

FBI and CISA Warn of Ghost Ransomware: A Threat to Firms Worldwide

FBI and CISA warn of Ghost ransomware, a China-based cyber threat targeting businesses, schools, and healthcare worldwide by exploiting software vulnerabilities...

Carrier Block Load

RISK EVALUATION Successful exploitation of this vulnerability could allow a malicious actor to execute arbitrary code with escalated privileges. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability, such as: Minimize...

Rapid Response Monitoring My Security Account App

RISK EVALUATION Successful exploitation of this vulnerability could allow attacker to access sensitive information of other users. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability, such as: Minimize network exposure...

CVE-2025-27092 Path Traversal Vulnerability in GHOSTS Photo Retrieval Endpoint

GHOSTS is an open source user simulation framework for cyber experimentation, simulation, training, and exercise. A path traversal vulnerability was discovered in GHOSTS version 8.0.0.0 that allows an attacker to access files outside of the intended directory through the photo retrieval endpoint...

CVE-2024-25599

creationtimestamp| type| source ---|---|--- 2025-02-19 21:02:45+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3likodsa3eu2o...

CVE-2024-32589

creationtimestamp| type| source ---|---|--- 2025-02-19 21:02:32+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3likodq2vj42o...

CVE-2024-52541

creationtimestamp| type| source ---|---|--- 2025-02-19 18:06:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3likeja4ipd2v 2025-02-19 19:48:50+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114032281469424192 2025-02-19 20:25:03+00:00| seen|...

CISA and Partners Release Advisory on Ghost (Cring) Ransomware

Today, CISA—in partnership with the Federal Bureau of Investigation FBI and Multi-State Information Sharing and Analysis Center MS-ISAC—released a joint Cybersecurity Advisory, StopRansomware: Ghost Cring Ransomware. This advisory provides network defenders with indicators of compromise IOCs,...

Chinese Hackers Exploit MAVInject.exe to Evade Detection in Targeted Cyber Attacks

The Chinese state-sponsored threat actor known as Mustang Panda has been observed employing a novel technique to evade detection and maintain control over infected systems. This involves the use of a legitimate Microsoft Windows utility called Microsoft Application Virtualization Injector...

CVE-2024-13797

creationtimestamp| type| source ---|---|--- 2025-02-18 11:15:56+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lih53w5h4v2o 2025-02-18 12:38:09+00:00| seen| https://t.me/cvedetector/18319 2025-02-18 13:56:47+00:00| seen|...

Winnti APT41 Targets Japanese Firms in RevivalStone Cyber Espionage Campaign

The China-linked threat actor known as Winnti has been attributed to a new campaign dubbed RevivalStone that targeted Japanese companies in the manufacturing, materials, and energy sectors in March 2024. The activity, detailed by Japanese cybersecurity company LAC, overlaps with a threat cluster...

CISO's Expert Guide To CTEM And Why It Matters

Cyber threats evolve—has your defense strategy kept up? A new free guide available here explains why Continuous Threat Exposure Management CTEM is the smart approach for proactive cybersecurity. This concise report makes a clear business case for why CTEM's comprehensive approach is the best...

CVE-2025-26819

creationtimestamp| type| source ---|---|--- 2025-02-14 23:45:37+00:00| seen| https://infosec.exchange/users/cve/statuses/114004901010161747 2025-02-15 00:16:20+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3li6gtpcqld2t 2025-02-15 00:48:27+00:00| seen|...

Scammers Exploit JFK Files Release with Malware and Phishing

Veriti Research reported a developing cyber threat campaign centred around the declassification and release of the RFK, MLK…...

Microsoft: Russian-Linked Hackers Using 'Device Code Phishing' to Hijack Accounts

Microsoft is calling attention to an emerging threat cluster it calls Storm-2372 that has been attributed to a new set of cyber attacks aimed at a variety of sectors since August 2024. The attacks have targeted government, non-governmental organizations NGOs, information technology IT services an...

Qualys Adds Threat Intelligence for Typosquatting and Defamatory Domains to External Attack Surface Management

Cybersecurity professionals can now use Qualys CyberSecurity Asset Management CSAM with External Attack Surface Management EASM to reduce cyber risks from credential harvesting, phishing, and malware downloads and diminish reputational harm. Bad actors have been registering look-alike, sound-alik...

Microsoft Uncovers Sandworm Subgroup's Global Cyber Attacks Spanning 15+ Countries

A subgroup within the infamous Russian state-sponsored hacking group known as Sandworm has been attributed to a multi-year initial access operation dubbed BadPilot that stretched across the globe. "This subgroup has conducted globally diverse compromises of Internet-facing infrastructure to enabl...

CVE-2025-0556

creationtimestamp| type| source ---|---|--- 2025-02-12 16:16:39+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhyl4436ta2z 2025-02-12 16:48:39+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/113991936845880152 2025-02-12 18:33:24+00:00| seen|...

CVE-2025-26378

creationtimestamp| type| source ---|---|--- 2025-02-12 14:48:42+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/113991465046191646 2025-02-12 15:09:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lhyhdyrtcl24 2025-02-12 15:37:02+00:00| seen|...