7519 matches found
Fortinet Firewalls Hit with New Zero-Day Attack, Older Data Leak
Executive summary Rapid7 is investigating two separate events affecting Fortinet firewall customers: Zero-day exploitation of CVE-2024-55591, an authentication bypass vulnerability in FortiOS and FortiProxy disclosed earlier this week. Successful exploitation could allow remote attackers to gain...
Fortinet Firewalls Hit with New Zero-Day Attack, Older Data Leak
Executive summary Rapid7 is investigating two separate events affecting Fortinet firewall customers: Zero-day exploitation of CVE-2024-55591, an authentication bypass vulnerability in FortiOS and FortiProxy disclosed earlier this week. Successful exploitation could allow remote attackers to gain...
3 Actively Exploited Zero-Day Flaws Patched in Microsoft's Latest Security Update
Microsoft kicked off 2025 with a new set of patches for a total of 161 security vulnerabilities across its software portfolio, including three zero-days that have been actively exploited in attacks. Of the 161 flaws, 11 are rated Critical and 149 are rated Important in severity. One other flaw, a...
PT-2025-12837
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 134.0.6998.177 Firefox versions prior to 136.0.4 Firefox ESR versions prior to 128.8.1 Firefox ESR versions prior to 115.21.1 Opera versions prior to 117.0.5408.163 Description An issue in the Mojo inter-process...
Microsoft: Happy 2025. Here’s 161 Security Updates
Microsoft today unleashed updates to plug a whopping 161 security vulnerabilities in Windows and related software, including three "zero-day" weaknesses that are already under active attack. Redmond's inaugural Patch Tuesday of 2025 bundles more fixes than the company has shipped in one go since...
Patch Tuesday - January 2025
Microsoft is addressing 161 vulnerabilities this January 2025 Patch Tuesday. Microsoft has evidence of in-the-wild exploitation and/or public disclosure for eight of the vulnerabilities published today, with three listed on CISA KEV. This is now the fourth consecutive month where Microsoft has...
Patch Tuesday - January 2025
Microsoft is addressing 161 vulnerabilities this January 2025 Patch Tuesday. Microsoft has evidence of in-the-wild exploitation and/or public disclosure for eight of the vulnerabilities published today, with three listed on CISA KEV. This is now the fourth consecutive month where Microsoft has...
Microsoft and Adobe Patch Tuesday, January 2025 Security Update Review
Happy New Year! As the calendar turns to January 2025, Microsoft's first Patch Tuesday of 2025 has arrived. From zero-days to critical vulnerabilities, here's what deserves your attention. Here's a breakdown of what's been patched. Microsoft Patch Tuesday for January 2025 Microsoft Patch's Tuesda...
CVE-2024-13163
creationtimestamp| type| source ---|---|--- 2025-01-14 18:10:34+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/1561 2025-01-14 18:16:12+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpub6gefo2t 2025-01-19 05:00:00+00:00| seen|...
CVE-2024-13172
creationtimestamp| type| source ---|---|--- 2025-01-14 17:51:41+00:00| seen| https://infosec.exchange/users/cve/statuses/113827977687754174 2025-01-14 18:16:36+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpubvmysy2t 2025-01-19 05:00:00+00:00| seen|...
CVE-2024-13169
creationtimestamp| type| source ---|---|--- 2025-01-14 17:36:41+00:00| seen| https://infosec.exchange/users/cve/statuses/113827918637313021 2025-01-14 18:16:28+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpubnjvco2e 2025-01-19 05:00:00+00:00| seen|...
CVE-2025-21331
creationtimestamp| type| source ---|---|--- 2025-01-14 17:29:48+00:00| seen| https://www.thezdi.com/blog/2025/1/14/the-january-2025-security-update-review 2025-01-14 18:22:07+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpulrfodn2s 2025-01-15 01:26:33+00:00| seen|...
CVE-2024-13158
creationtimestamp| type| source ---|---|--- 2025-01-14 17:21:39+00:00| seen| https://infosec.exchange/users/cve/statuses/113827859560170423 2025-01-14 18:15:56+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpuapcvce2r 2025-01-19 05:00:00+00:00| seen|...
CVE-2024-13180
creationtimestamp| type| source ---|---|--- 2025-01-14 17:15:42+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpquypfex2f 2025-01-14 17:21:13+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/1532 2025-01-14 19:01:22+00:00| seen| https://t.me/cvedetector/15307...
Fortinet Warns of New Zero-Day Used in Attacks on Firewalls with Exposed Interfaces
Threat hunters are calling attention to a new campaign that has targeted Fortinet FortiGate firewall devices with management interfaces exposed on the public internet. "The campaign involved unauthorized administrative logins on management interfaces of firewalls, creation of new accounts, SSL VP...
CISA: CISA SBOM-A-Rama Day 1 Slides
System About Files News Vote Help | Services API Advertise Contact | Account Join Login ---|---|---...
CVE-2024-45301
creationtimestamp| type| source ---|---|--- 2025-01-10 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-026/ 2025-11-12 20:02:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5hgyzlf7e26...
Zero-Day Vulnerability in Ivanti VPN
It's being actively exploited...