The Rise of Zero-Day Vulnerabilities: Why Traditional Security Solutions Fall Short

In recent years, the number and sophistication of zero-day vulnerabilities have surged, posing a critical threat to organizations of all sizes. A zero-day vulnerability is a security flaw in software that is unknown to the vendor and remains unpatched at the time of discovery. Attackers exploit...

BEC-ware the phish (part 1). Investigating incidents in M365

TL;DR Review the key artefacts to ensure the best possible telemetry is available in the case of a Business Email Compromise BEC. Keep an eye on data retention, where necessary export or forward data for investigations longer than 30 days. Verify and enable Unified Audit Logging, its free and giv...

CVE-2024-6519

creationtimestamp| type| source ---|---|--- 2024-10-15 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1382/ 2024-10-21 17:41:25+00:00| seen| https://t.me/cvedetector/8500 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/...

CVE-2024-48782

CVE-2024-48782 : Affected software is DYCMS Open-Source Version v2.0.9.41. The vulnerability is a file-upload flaw where the frontend only checks the file extension, enabling a remote attacker to execute arbitrary code. Impact is high (remote code execution) as described in connected sources. Som...

Ta Da! The Wiz Runtime Sensor is now available in Wiz for Gov (FedRAMP)

We are excited to announce the addition of the Wiz Sensor to Wiz for Gov’s ATO. The lightweight eBPF based sensor improves risk prioritization, deepens threat detection, and adds runtime protection for container hosts and VMs...

5 Steps to Boost Detection and Response in a Multi-Layered Cloud

The link between detection and response DR practices and cloud security has historically been weak. As global organizations increasingly adopt cloud environments, security strategies have largely focused on "shift-left" practices—securing code, ensuring proper cloud posture, and fixing...

Exploit for OS Command Injection in Php

🚀 CVE-2024-4577: PHP CGI Argument Injection Scanner and Exploi...

CVE-2024-49193

Zendesk before 2024-07-02 allows remote attackers to read ticket history via e-mail spoofing, because Cc fields are extracted from incoming e-mail messages and used to grant additional authorization for ticket viewing, the mechanism for detecting spoofed e-mail messages is insufficient, and the...

CVE-2024-48778

creationtimestamp| type| source ---|---|--- 2024-10-11 22:54:26+00:00| seen| https://t.me/cvedetector/7731...

What Are Normal Users Supposed to Do with IDS Alerts from Network Gear?

Probably once a week, I see posts like this in the r/Ubiquiti subreddit. Ubiquiti makes network gear that includes an "IDS/IPS" feature. I own some older Ubiquiti gear so I am familiar with the product. When you enable this feature, you get alerts like this one, posted by a Redditor: This is...

MAL-2024-9273 Malicious code in cbdev2024test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ef4fe76ee823f88ab6484802e30511e9103d6953aabe83c7758dfd4197613fee Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-9469

A problem with a detection mechanism in the Palo Alto Networks Cortex XDR agent on Windows devices enables a user with Windows non-administrative privileges to disable the agent. This issue may be leveraged by malware to disable the Cortex XDR agent and then to perform malicious activity...

CVE-2024-9469 Cortex XDR Agent: Local Windows User Can Disable the Agent

A problem with a detection mechanism in the Palo Alto Networks Cortex XDR agent on Windows devices enables a user with Windows non-administrative privileges to disable the agent. This issue may be leveraged by malware to disable the Cortex XDR agent and then to perform malicious activity...

CVE-2024-9469 Cortex XDR Agent: Local Windows User Can Disable the Agent

A problem with a detection mechanism in the Palo Alto Networks Cortex XDR agent on Windows devices enables a user with Windows non-administrative privileges to disable the agent. This issue may be leveraged by malware to disable the Cortex XDR agent and then to perform malicious activity...

CVE-2024-9469

CVE-2024-9469 affects the Windows Cortex XDR Agent by a detection-mechanism flaw that allows a non-administrative user to disable the agent. Root cause described as insufficient checking of unusual or exceptional states in the detection logic. Impact reported as agent disable with potential for m...

PAN-OS: Firewall Denial of Service (DoS) via a Maliciously Crafted Packet

A memory corruption vulnerability in Palo Alto Networks PAN-OS software allows an unauthenticated attacker to crash PAN-OS due to a crafted packet through the data plane, resulting in a denial of service DoS condition. Repeated attempts to trigger this condition will result in PAN-OS entering...

firefox: thunderbird: External protocol handlers could be enumerated via popups

The Mozilla Foundation's Security Advisory: By checking the result of calls to window.open with specifically set protocol handlers, an attacker could determine if the application which implements that protocol handler is installed...

Social Media Accounts: The Weak Link in Organizational SaaS Security

Social media accounts help shape a brand's identity and reputation. These public forums engage directly with customers as they are a hub to connect, share content and answer questions. However, despite the high profile role these accounts have, many organizations overlook social media account...

CVE-2024-25282

creationtimestamp| type| source ---|---|--- 2024-10-09 07:17:02+00:00| seen| https://t.me/cvedetector/7420...

MAL-2024-9139 Malicious code in code-script-new-viking-simulator-script-hm9gi2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 058793c63bd85edadc62fdaf3684566ed1bc0687f28f5d5f36b5f5d3cb1ca680 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...