CISA and FBI Release Advisory on How Threat Actors Chained Vulnerabilities in Ivanti Cloud Service Applications

CISA, in partnership with the Federal Bureau of Investigation FBI, released Threat Actors Chained Vulnerabilities in Ivanti Cloud Service Applications. This advisory was crafted in response to exploitation of vulnerabilities—CVE-2024-8963, an administrative bypass vulnerability; CVE-2024-9379, a...

Criminal IP and OnTheHub Partner to Deliver Advanced Cybersecurity Solutions for Education

Torrance, United States / California, 22nd January 2025, CyberNewsWire...

CVE-2025-21524

creationtimestamp| type| source ---|---|--- 2025-01-21 21:17:47+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgbrobymzh2j 2025-01-21 21:48:57+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/113868546792768210 2025-01-22 15:49:21+00:00| seen|...

CVE-2025-21564

...

CVE-2025-21560

CVE-2025-21560 affects Oracle Agile PLM Framework (component: SDK) with vulnerable 9.3.6. A low-privilege, network-access attacker (HTTP) can compromise the framework, potentially gaining unauthorized access to critical data or all data accessible by Oracle Agile PLM Framework. Concrete details f...

CVE-2025-21552

CVE-2025-21552 affects JD Edwards EnterpriseOne Orchestrator (E1 IOT Orchestrator Security). Connected PT-2025-4274 details a vulnerability due to insufficient input validation in the E1 IOT Orchestrator Security component, with affected versions prior to 9.2.9.2.Impact: low-privilege attacker wi...

CVE-2025-21546

CVE-2025-21546 affects Oracle MySQL Server (Server: Privileges) with vulnerable ranges: 8.0.40 and prior, 8.4.3 and prior, and 9.1.0 and prior. The Nessus-based sources describe this as an easily exploitable, network-accessible vulnerability that can let a high-privileged attacker update, insert,...

CVE-2025-21540

...

Mass Campaign of Murdoc Botnet Mirai: A New Variant of Corona Mirai

The Qualys Threat Research Unit has uncovered a large-scale, ongoing operation within the Mirai campaign, dubbed Murdoc Botnet. This variant exploits vulnerabilities targeting AVTECH Cameras and Huawei HG532 routers. It demonstrates enhanced capabilities, exploiting vulnerabilities to compromise...

ZF Roll Stability Support Plus (RSSPlus)

RISK EVALUATION Successful exploitation of this vulnerability could allow an unauthenticated attacker to remotely proximal/adjacent with RF equipment call diagnostic functions which could impact both the availability and integrity. 2. RECOMMENDED PRACTICES CISA recommends users take defensive...

BELL-CVE-2023-52923

Bulletin has no description...

Biden Signs New Cybersecurity Order

President Biden has signed a new cybersecurity order. It has a bunch of provisions, most notably using the US governments procurement power to improve cybersecurity practices industry-wide. Some details: The core of the executive order is an array of mandates for protecting government networks...

⚡ THN Weekly Recap: Top Cybersecurity Threats, Tools and Tips [20 January]

As the digital world becomes more complicated, the lines between national security and cybersecurity are starting to fade. Recent cyber sanctions and intelligence moves show a reality where malware and fake news are used as tools in global politics. Every cyberattack now seems to have deeper...

CVE-2023-24278

creationtimestamp| type| source ---|---|--- 2025-01-19 21:02:02+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lg4pub7dg52h 2025-02-26 19:24:17+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5585...

U.S. Sanctions Chinese Cybersecurity Firm Over Treasury Hack Tied to Silk Typhoon

The U.S. Treasury Department's Office of Foreign Assets Control OFAC has imposed sanctions against a Chinese cybersecurity company and a Shanghai-based cyber actor for their alleged links to the Salt Typhoon group and the recent compromise of the federal agency. "People's Republic of China-linked...

Python-Based Bots Exploiting PHP Servers Fuel Gambling Platform Proliferation

Cybersecurity researchers have exposed a new campaign that targets web servers running PHP-based applications to promote gambling platforms in Indonesia. "Over the past two months, a significant volume of attacks from Python-based bots has been observed, suggesting a coordinated effort to exploit...

Microsoft Active Directory Domain Services Elevation of Privilege Vulnerability (CNVD-2025-02127)

Microsoft Active Directory Domain Services is a key service from Microsoft Corporation USA for managing and organizing resources, users, computers, and other security objects in a network. A security vulnerability exists in Microsoft Active Directory Domain Services. An attacker could exploit the...

CVE-2025-23816

creationtimestamp| type| source ---|---|--- 2025-01-16 21:17:13+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfv7cpqz632r...

CVE-2025-23528

creationtimestamp| type| source ---|---|--- 2025-01-16 20:17:35+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfv3y3mx6y2t 2025-01-16 20:48:55+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/113839999140468940 2025-01-16 20:49:17+00:00| seen|...

CVE-2025-23779 WordPress ResAds Plugin <= 2.0.5 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in web-mv ResAds resads allows SQL Injection.This issue affects ResAds: from n/a through = 2.0.5...