CVE-2025-24149

creationtimestamp| type| source ---|---|--- 2025-01-27 22:18:51+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgqxv2hjpy2c 2025-01-28 00:23:41+00:00| seen| https://t.me/cvedetector/16541 2025-03-18 04:00:00+00:00| seen|...

CVE-2025-24124

creationtimestamp| type| source ---|---|--- 2025-01-27 22:18:04+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgqxtmyoz72r 2025-01-28 18:48:58+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/113907475072892051 2025-03-18 04:00:00+00:00| seen|...

CVE-2024-54497

creationtimestamp| type| source ---|---|--- 2025-01-27 22:15:54+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgqxprgjhv2n 2025-03-18 04:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-169/...

SonicWall SMA Appliances Exploited in Zero-Day Attacks

Critical security flaw in SonicWall SMA 1000 appliances CVE-2025-23006 exploited as a zero-day. Rated CVSS 9.8, patch immediately…...

Hackers Exploit Zero-Day in cnPilot Routers to Deploy AIRASHI DDoS Botnet

Threat actors are exploiting an unspecified zero-day vulnerability in Cambium Networks cnPilot routers to deploy a variant of the AISURU botnet called AIRASHI to carry out distributed denial-of-service DDoS attacks. According to QiAnXin XLab, the attacks have leveraged the security flaw since Jun...

GHSA-79XX-VF93-P7CX Cross-Site Scripting (XSS) vulnerability in generateNavigation() function in PhpSpreadsheet

Summary The researcher discovered zero-day vulnerability Cross-Site Scripting XSS vulnerability in the code which translates the XLSX file into a HTML representation and displays it in the response. Details When generating the HTML from an xlsx file containing multiple sheets, a navigation menu i...

A week in security (January 13 – January 19)

Last week on Malwarebytes Labs: iMessage text gets recipient to disable phishing protection so they can be phished The new rules for AI and encrypted messaging, with Mallory Knodel Lock and Code S06E01 Insurance company accused of using secret software to illegally collect and sell location data ...

CVE-2025-0569

creationtimestamp| type| source ---|---|--- 2025-01-20 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-052/ 2025-01-30 20:35:45+00:00| seen| https://infosec.exchange/users/cve/statuses/113919219768954176 2025-01-30 21:15:59+00:00| seen|...

CVE-2025-0570

creationtimestamp| type| source ---|---|--- 2025-01-20 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-050/ 2025-01-30 20:35:45+00:00| seen| https://infosec.exchange/users/cve/statuses/113919219783242151 2025-01-30 21:16:02+00:00| seen|...

Fortinet Firewalls Hit with New Zero-Day Attack, Older Data Leak

Executive summary Rapid7 is investigating two separate events affecting Fortinet firewall customers: Zero-day exploitation of CVE-2024-55591, an authentication bypass vulnerability in FortiOS and FortiProxy disclosed earlier this week. Successful exploitation could allow remote attackers to gain...

Fortinet Firewalls Hit with New Zero-Day Attack, Older Data Leak

Executive summary Rapid7 is investigating two separate events affecting Fortinet firewall customers: Zero-day exploitation of CVE-2024-55591, an authentication bypass vulnerability in FortiOS and FortiProxy disclosed earlier this week. Successful exploitation could allow remote attackers to gain...

3 Actively Exploited Zero-Day Flaws Patched in Microsoft's Latest Security Update

Microsoft kicked off 2025 with a new set of patches for a total of 161 security vulnerabilities across its software portfolio, including three zero-days that have been actively exploited in attacks. Of the 161 flaws, 11 are rated Critical and 149 are rated Important in severity. One other flaw, a...

PT-2025-12837

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 134.0.6998.177. Description A zero-day vulnerability, tracked as CVE-2025-2783, has been discovered in Google Chrome's Mojo IPC component, allowing remote attackers to escape the browser's sandbox on Windows...

Microsoft: Happy 2025. Here’s 161 Security Updates

Microsoft today unleashed updates to plug a whopping 161 security vulnerabilities in Windows and related software, including three "zero-day" weaknesses that are already under active attack. Redmond's inaugural Patch Tuesday of 2025 bundles more fixes than the company has shipped in one go since...

Patch Tuesday - January 2025

Microsoft is addressing 161 vulnerabilities this January 2025 Patch Tuesday. Microsoft has evidence of in-the-wild exploitation and/or public disclosure for eight of the vulnerabilities published today, with three listed on CISA KEV. This is now the fourth consecutive month where Microsoft has...

Patch Tuesday - January 2025

Microsoft is addressing 161 vulnerabilities this January 2025 Patch Tuesday. Microsoft has evidence of in-the-wild exploitation and/or public disclosure for eight of the vulnerabilities published today, with three listed on CISA KEV. This is now the fourth consecutive month where Microsoft has...

Microsoft and Adobe Patch Tuesday, January 2025 Security Update Review

Happy New Year! As the calendar turns to January 2025, Microsoft's first Patch Tuesday of 2025 has arrived. From zero-days to critical vulnerabilities, here's what deserves your attention. Here's a breakdown of what's been patched. Microsoft Patch Tuesday for January 2025 Microsoft Patch's Tuesda...

CVE-2024-13163

creationtimestamp| type| source ---|---|--- 2025-01-14 18:10:34+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/1561 2025-01-14 18:16:12+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpub6gefo2t 2025-01-19 05:00:00+00:00| seen|...

CVE-2024-13172

creationtimestamp| type| source ---|---|--- 2025-01-14 17:51:41+00:00| seen| https://infosec.exchange/users/cve/statuses/113827977687754174 2025-01-14 18:16:36+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpubvmysy2t 2025-01-19 05:00:00+00:00| seen|...

CVE-2024-13169

creationtimestamp| type| source ---|---|--- 2025-01-14 17:36:41+00:00| seen| https://infosec.exchange/users/cve/statuses/113827918637313021 2025-01-14 18:16:28+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpubnjvco2e 2025-01-19 05:00:00+00:00| seen|...