Lazarus Group Targets Nuclear Industry with CookiePlus Malware

KEY SUMMARY POINTS Securelist by Kaspersky has published its latest threat intelligence report focused on the activities of…...

CVE-2024-45387

creationtimestamp| type| source ---|---|--- 2024-12-23 18:20:06+00:00| seen| https://t.me/cvedetector/13540 2024-12-25 10:30:58+00:00| seen| https://bsky.app/profile/bolhasec.com/post/3le4qwtmp262a 2024-12-25 12:30:00+00:00| seen|...

CVE-2024-53580

creationtimestamp| type| source ---|---|--- 2024-12-19 01:24:49+00:00| seen| https://t.me/cvedetector/13265 2025-04-04 23:37:44+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/10584 2025-09-15 13:28:32+00:00| seen| MISP/acd0294c-4561-4286-a04e-5c02a1c67b1f 2025-09-16...

CVE-2024-12686

creationtimestamp| type| source ---|---|--- 2024-12-18 20:30:23+00:00| seen| https://infosec.exchange/users/cve/statuses/113675719318388901 2024-12-18 22:54:10+00:00| seen| https://t.me/cvedetector/13251 2024-12-19 17:22:24+00:00| seen|...

WordPress AI Magic – SEO Content Generator & Article Writer plugin <= 1.0.4 - Privilege Escalation vulnerability

Privilege Escalation vulnerability discovered by Mika in WordPress Plugin AI Magic versions = 1.0.4...

CVE-2024-52875

creationtimestamp| type| source ---|---|--- 2024-12-17 14:10:59+00:00| published-proof-of-concept| https://t.me/thebugbountyhunter/9452 2024-12-21 18:13:24+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/11586 2025-01-01 18:03:16+00:00| seen|...

CVE-2024-49775

A vulnerability has been identified in Opcenter Execution Foundation All versions V2501.0001, Opcenter Intelligence All versions V2501.0001, Opcenter Quality All versions V2512, Opcenter RDnL All versions V2410, SIMATIC PCS neo V4.0 All versions, SIMATIC PCS neo V4.1 All versions V4.1 Update 3,...

2024 Threat Landscape Statistics: Ransomware Activity, Vulnerability Exploits, and Attack Trends

Now that we’ve reached the end of another year, you may be looking around the cybersecurity infosphere and seeing a glut of posts offering “hot takes” on the 2024 threat landscape and predictions about what’s coming next. At Rapid7, we don’t truck in hot takes, but rather, cold hard facts. Stayin...

New Investment Scam Leverages AI, Social Media Ads to Target Victims Worldwide

Cybersecurity researchers are calling attention to a new kind of investment scam that leverages a combination of social media malvertising, company-branded posts, and artificial intelligence AI powered video testimonials featuring famous personalities, ultimately leading to financial and data los...

Siemens Opcenter Intelligence Buffer Overflow Vulnerability

Opcenter Intelligence is a manufacturing intelligence solution from Siemens designed to improve the efficiency and quality of manufacturing processes through big data analytics. The solution offers a wide range of products and services to meet the needs of different users. A buffer overflow...

PT-2024-9692 · Siemens · Sinec Nms +6

Name of the Vulnerable Software and Affected Versions: Opcenter Execution Foundation versions prior to V5.0 Update 1 Opcenter Intelligence versions prior to V5.0 Update 1 Opcenter Quality versions prior to V5.0 Update 1 Opcenter RDL versions prior to V5.0 Update 1 SIMATIC PCS neo V4.0 versions...

CVE-2024-49775: Heap-based Buffer Overflow

A vulnerability has been identified in Opcenter Execution Foundation All versions V2501.0001, Opcenter Intelligence All versions V2501.0001, Opcenter Quality All versions V2512, Opcenter RDnL All versions V2410, SIMATIC PCS neo V4.0 All versions, SIMATIC PCS neo V4.1 All versions V4.1 Update 3,...

CVE-2024-12581

The Gutenberg Blocks with AI by Kadence WP – Page Builder Features plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 3.2.53 due to insufficient input sanitization and output escaping. This makes it possible for authenticated...

IBM QRadar SIEM Cross-Site Scripting Vulnerability (CNVD-2024-49170)

IBM QRadar SIEM is a solution from International Business Machines IBM that utilizes security intelligence to protect assets and information from advanced threats. The solution provides oversight of the entire scope of the IT architecture, generates detailed reports on data access and user...

INTERPOL & Trend's Fight Against Cybercrime

Trend threat intelligence and training were crucial to the success of two major policing operations in 2024...

WordPress plugin AI Engine 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

SAP BusinessObjects Business Intelligence Platform Information Disclosure (3524933)

The version of SAP BusinessObjects Business Intelligence Platform installed on the remote host is prior to 2025 SP000 000000, 4.3 SP004 000800, or 4.3 SP005 000000. It is, therefore, affected by a vulnerability as referenced in the 3524933 advisory. - Under certain conditions SAP BusinessObjects...

CVE-2024-45404 OpenCTI's lack of Rate Limit lead to OTP brute forcing

OpenCTI is an open-source cyber threat intelligence platform. In versions below 6.2.18, because the function to limit the rate of OTP does not exist, an attacker with valid credentials or a malicious user who commits internal fraud can break through the two-factor authentication and hijack the...

CVE-2024-45404 OpenCTI's lack of Rate Limit lead to OTP brute forcing

OpenCTI is an open-source cyber threat intelligence platform. In versions below 6.2.18, because the function to limit the rate of OTP does not exist, an attacker with valid credentials or a malicious user who commits internal fraud can break through the two-factor authentication and hijack the...

Secret Blizzard Deploys Kazuar Backdoor in Ukraine Using Amadey Malware-as-a-Service

The Russian nation-state actor tracked as Secret Blizzard has been observed leveraging malware associated with other threat actors to deploy a known backdoor called Kazuar on target devices located in Ukraine. The new findings come from the Microsoft threat intelligence team, which said it observ...