RHSA-2024:8563

creationtimestamp| type| source ---|---|--- 2025-03-11 02:40:08+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/7100 2025-04-10 21:49:44+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/11358...

CVE-2025-27661

creationtimestamp| type| source ---|---|--- 2025-03-05 08:34:58+00:00| seen| https://t.me/cvedetector/19604 2025-03-05 20:29:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ljnszhqoyj2o 2025-03-06 00:00:25+00:00| seen|...

CVE-2025-25476

creationtimestamp| type| source ---|---|--- 2025-02-28 23:27:50+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/6023 2025-03-01 02:13:44+00:00| seen| https://t.me/cvedetector/19194 2025-03-02 11:46:30+00:00| seen| Telegram/3xB6M54-wSCQN7enHt26ebBCCT1YEan57cXsGm01RSafoLfk...

CVE-2025-25916

creationtimestamp| type| source ---|---|--- 2025-02-28 15:26:35+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/5906 2025-02-28 17:51:54+00:00| seen| https://t.me/cvedetector/19157 2025-03-02 11:45:36+00:00| seen| Telegram/OqtijlW6O0ZityJe562GbnWUuNQKTkLnHrDYscLPgzD6l66v...

Becoming Ransomware Ready: Why Continuous Validation Is Your Best Defense

Ransomware doesn't hit all at once—it slowly floods your defenses in stages. Like a ship subsumed with water, the attack starts quietly, below the surface, with subtle warning signs that are easy to miss. By the time encryption starts, it's too late to stop the flood. Each stage of a ransomware...

CISA and Partners Release Advisory on Ghost (Cring) Ransomware

Today, CISA—in partnership with the Federal Bureau of Investigation FBI and Multi-State Information Sharing and Analysis Center MS-ISAC—released a joint Cybersecurity Advisory, StopRansomware: Ghost Cring Ransomware. This advisory provides network defenders with indicators of compromise IOCs,...

GHSA-7G7F-62CF-Q66H

creationtimestamp| type| source ---|---|--- 2025-02-17 00:19:09+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/4615 2025-02-17 00:20:14+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/4620 2025-02-17 00:21:11+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/4625 2025-02-17 00:22:16+00:00...

GHSA-F8Q2-7FV5-CG93

creationtimestamp| type| source ---|---|--- 2025-01-29 15:30:45+00:00| seen| https://infosec.exchange/users/cve/statuses/113912358161091347...

Key Performance Indicators for Effective DSPM Implementation

What are the most important KPI’s for a successful DSPM implementation? Let's explore what KPI’s to monitor, why they matter, and how you can take advantage of them for improved security at your org...

Vulnerability fixed in FortiNet FortiOS and FortiProxy

FortiNet has fixed a vulnerability in FortiOS and FortiProxy. The vulnerability is in the node.js implementation of the management Web interface and allows a malicious person to bypass authentication to become super-admin on the vulnerable system without prior authentication or authorizations. Fo...

Tracking cloud-fluent threat actors - Part two: Behavioral cloud IOCs

Discover how behavioral cloud IOCs can expose malicious activity as we break down real-world examples to reveal actionable detection techniques...

RHSA-2024:5145

creationtimestamp| type| source ---|---|--- 2025-01-09 22:16:14+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/1110 2025-02-26 04:24:30+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5446 2025-03-03 14:30:00+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/6207 2025-06-18 19:39:59+00:00...

CVE-2024-54493

This issue was addressed through improved state management. This issue is fixed in macOS Sequoia 15.2. Privacy indicators for microphone access may be attributed incorrectly...

CVE-2024-54493: Undefined Security Weakness

This issue was addressed through improved state management. This issue is fixed in macOS Sequoia 15.2. Privacy indicators for microphone access may be attributed incorrectly...

CVE-2024-54493

This issue was addressed through improved state management. This issue is fixed in macOS Sequoia 15.2. Privacy indicators for microphone access may be attributed incorrectly...

PT-2024-36359 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 15.2 Description: This issue was addressed through improved state management. The problem involves incorrect attribution of privacy indicators for microphone access. Recommendations: For versions prior to 15.2, update ...

CVE-2024-42326

creationtimestamp| type| source ---|---|--- 2024-11-27 12:15:05+00:00| seen| https://infosec.exchange/users/cve/statuses/113554863197449679 2024-11-27 12:18:43+00:00| seen| https://infosec.exchange/users/cve/statuses/113554877452294601...

PAN-OS Firewall Vulnerability Under Active Exploitation – IoCs and Patch Released

Palo Alto Networks has released new indicators of compromise IoCs a day after the network security vendor confirmed that a zero-day vulnerability impacting its PAN-OS firewall management interface has been actively exploited in the wild. To that end, the company said it observed malicious activit...

Vulnerability discovered in Fortinet FortiManager

UPDATE Public proof of concept PoC code for the vulnerability is available. It applies to FortiManager variants that have not yet been patched. Also, researchers have discovered that Fortinet's patch did not fix the full chain of exploitation. Thus, it is still possible to execute code on a patch...

Ymir: new stealthy ransomware in the wild

Introduction In a recent incident response case, we discovered a new and notable ransomware family in active use by the attackers, which we named "Ymir". The artifact has interesting features, including a large set of operations performed in memory with the help of the malloc , memmove and memcmp...