18343 matches found
CISA Adds Four Known Exploited Vulnerabilities to Catalog
CISA has added four vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2024-55591link is external Fortinet FortiOS Authorization Bypass Vulnerability CVE-2025-21333link is external Microsoft Windows Hyper-V NT Kernel Integration VSP...
CVE-2025-0394
creationtimestamp| type| source ---|---|--- 2025-01-14 08:28:47+00:00| seen| https://infosec.exchange/users/cve/statuses/113825764299839192 2025-01-14 09:10:41+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/1468 2025-01-14 09:15:52+00:00| seen|...
Microsoft Outlook Remote Code Execution Vulnerability
...
Belledonne Communications Linphone-Desktop
RISK EVALUATION Successful exploitation of this vulnerability could could result in a remote attacker causing a denial-of-service condition on the affected devices. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability,...
Schneider Electric EcoStruxure Power Monitoring Expert (PME) (Update A)
RISK EVALUATION Successful exploitation of this vulnerability could cause a denial-of-service of the product when an unauthenticated user sends a crafted HTTPS packet to the webserver. 2. RECOMMENDED PRACTICES CISA reminds organizations to perform proper impact analysis and risk assessment prior...
CVE-2024-57642
creationtimestamp| type| source ---|---|--- 2025-01-14 01:08:37+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/1447 2025-01-14 01:17:00+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfo3cpvyl22c 2025-01-14 02:01:31+00:00| seen|...
CISA: AI Cybersecurity Collaboration Playbook
The AI Cybersecurity Collaboration Playbook provides guidance to organizations across the AI community – including AI providers, developers, and adopters – for sharing AI-related cybersecurity information voluntarily with the Cybersecurity and Infrastructure Security Agency CISA and other partner...
Schneider Electric Pro-face GP-Pro EX and Remote HMI (Update A)
RISK EVALUATION Successful exploitation of this vulnerability could allow man-in-the-middle attacks which could result in information disclosure, integrity issues and operational failures. 2. RECOMMENDED PRACTICES CISA reminds organizations to perform proper impact analysis and risk assessment...
Schneider Electric EcoStruxure Power Build Rapsody
GENERAL SECURITY RECOMMENDATIONS We strongly recommend the following industry cybersecurity best practices. https://www.se.com/us/en/download/document/7EN52-0390/ Locate control and safety system networks and remote devices behind firewalls and isolate them from the business network. Install...
Schneider Electric Modicon M340 and BMXNOE0100/0110, BMXNOR0200H (Update B)
RISK EVALUATION Successful exploitation of this vulnerability could cause information disclosure of a restricted web page, modification of a web page and a denial of service when specific web pages are modified and restricted functions are invoked. 2. RECOMMENDED PRACTICES CISA reminds...
Schneider Electric RemoteConnect and SCADAPack x70 Utilities (Update A)
RISK EVALUATION Successful exploitation of this vulnerability could lead to loss of confidentiality, integrity and potential remote code execution on workstation when a non-admin authenticated user opens a malicious project file. 2. RECOMMENDED PRACTICES CISA recommends users take defensive...
⚡ THN Weekly Recap: Top Cybersecurity Threats, Tools and Tips [13 January]
The cyber world’s been buzzing this week, and it’s all about staying ahead of the bad guys. From sneaky software bugs to advanced hacking tricks, the risks are real, but so are the ways to protect yourself. In this recap, we’ll break down what’s happening, why it matters, and what you can do to...
World Tour Survey: Cloud Engineers Wrestle with Risk
Trend surveyed 750 cybersecurity professionals in 49 countries to learn more about the state of cybersecurity, from job pressures to the need for more advanced tools. Explore what cloud security engineers teams had to say...
CISA: STS Scenarios Workshop 1 Scenario 2 a Fragmented World
System About Files News Vote Help | Services API Advertise Contact | Account Join Login ---|---|---...
CISA: Cybersecurity for Physical Security Professionals
System About Files News Vote Help | Services API Advertise Contact | Account Join Login ---|---|---...
CISA: 2020 ISC Annual Review
System About Files News Vote Help | Services API Advertise Contact | Account Join Login ---|---|---...
CISA: 2019 ISC Annual Review
System About Files News Vote Help | Services API Advertise Contact | Account Join Login ---|---|---...
CISA: Cybersecurity Evaluation Tool (CSET) Seminar Presentation
System About Files News Vote Help | Services API Advertise Contact | Account Join Login ---|---|---...