742 matches found
CVE-2024-27875
A logic issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15. Privacy Indicators for microphone or camera access may be attributed incorrectly...
CVE-2024-27875
CVE-2024-27875 affects macOS Sequoia 15.0 and is described as a logic/state-management issue that can cause Privacy Indicators for microphone or camera access to be attributed incorrectly. The primary sources (NVD/NVD+CNA, Red Hat advisory, Apple security notes) confirm a fix in macOS Sequoia 15 ...
CISA and Partners Release Advisory on RansomHub Ransomware
Today, CISA—in partnership with the Federal Bureau of Investigation FBI, Multi-State Information Sharing and Analysis Center MS-ISAC, and Department of Health and Human Services HHS—released a joint Cybersecurity Advisory, StopRansomware: RansomHub Ransomware. This advisory provides network...
CISA and Partners Release Advisory on Iran-based Cyber Actors Enabling Ransomware Attacks on US Organizations
Today, CISA—in partnership with the Federal Bureau of Investigation FBI and the Department of Defense Cyber Crime Center DC3—released Iran-based Cyber Actors Enabling Ransomware Attacks on U.S. Organizations. This joint advisory warns of cyber actors, known in the private sector as Pioneer Kitten...
New Android Spyware LianSpy Evades Detection Using Yandex Cloud
Users in Russia have been the target of a previously undocumented Android post-compromise spyware called LianSpy since at least 2021. Cybersecurity vendor Kaspersky, which discovered the malware in March 2024, noted its use of Yandex Cloud, a Russian cloud service, for command-and-control C2...
CISA Red Team’s Operations Against a Federal Civilian Executive Branch Organization Highlights the Necessity of Defense-in-Depth
EXECUTIVE SUMMARY In early 2023, the Cybersecurity and Infrastructure Security Agency CISA conducted a SILENTSHIELD red team assessment against a Federal Civilian Executive Branch FCEB organization. During SILENTSHIELD assessments, the red team first performs a no-notice, long-term simulation of...
Malicious code in sdg-indicators-usa (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0a48c1b5ed5fceb3fc94881f03f0f71ec04e088afc35beba3acbc15cc2639a1f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-2992 Malicious code in sdg-indicators-usa (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0a48c1b5ed5fceb3fc94881f03f0f71ec04e088afc35beba3acbc15cc2639a1f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Security Advisory 0098
Security Advisory 0098 . CSAF PDF Date: June 25, 2024 Revision | Date | Changes ---|---|--- 1.0 | June 25, 2024 | Initial release The CVE-ID tracking this issue: CVE-2024-4578 CVSSv3.1 Base Score: 8.4 CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H Common Weakness Enumeration: CWE-77 Improper...
Exploit for OS Command Injection in Fortinet Fortisiem
CVE-2023-34992: Fortinet FortiSIEM Unauthenticated Command Inj...
SHQ Response Platform and Risk Centre to Enable Management and Analysts Alike
In the last decade, there has been a growing disconnect between front-line analysts and senior management in IT and Cybersecurity. Well-documented challenges facing modern analysts revolve around a high volume of alerts, false positives, poor visibility of technical environments, and analysts...
Exploit for Code Injection in Crushftp
CVE-2024-4040 - exploit scanners This repository contains fil...
CISA and Partners Release Advisory on Akira Ransomware
Today, CISA, the Federal Bureau of Investigation FBI, Europol’s European Cybercrime Centre EC3, and the Netherlands’ National Cyber Security Centre NCSC-NL released a joint Cybersecurity Advisory CSA, StopRansomware: Akira Ransomware, to disseminate known Akira ransomware tactics, techniques, and...
CVE-2024-27096
creationtimestamp| type| source ---|---|--- 2024-03-18 18:21:49+00:00| seen| https://t.me/ctinow/210821 2024-03-18 18:26:43+00:00| seen| https://t.me/ctinow/210826 2024-03-25 18:27:05+00:00| published-proof-of-concept| https://t.me/truesecator/5564...
CVE-2024-1331
creationtimestamp| type| source ---|---|--- 2024-03-18 17:26:52+00:00| seen| https://t.me/ctinow/210755 2024-03-18 17:31:57+00:00| seen| https://t.me/ctinow/210769...
CVE-2024-2482
creationtimestamp| type| source ---|---|--- 2024-03-15 07:41:30+00:00| seen| https://t.me/ctinow/208468 2024-03-15 08:26:09+00:00| seen| https://t.me/ctinow/208497 2024-03-15 08:31:55+00:00| seen| https://t.me/ctinow/208505 2024-03-16 21:37:59+00:00| seen| https://t.me/arpsyndicate/4262...
CVE-2024-2431
creationtimestamp| type| source ---|---|--- 2024-03-13 19:32:20+00:00| seen| https://t.me/ctinow/207060 2024-03-13 19:32:26+00:00| seen| https://t.me/ctinow/207065...
CVE-2024-28667
creationtimestamp| type| source ---|---|--- 2024-03-13 14:31:58+00:00| seen| https://t.me/ctinow/206729 2024-03-13 14:32:09+00:00| seen| https://t.me/ctinow/206737...