CVE-2025-21331

creationtimestamp| type| source ---|---|--- 2025-01-14 17:29:48+00:00| seen| https://www.thezdi.com/blog/2025/1/14/the-january-2025-security-update-review 2025-01-14 18:22:07+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpulrfodn2s 2025-01-15 01:26:33+00:00| seen|...

CVE-2024-13158

creationtimestamp| type| source ---|---|--- 2025-01-14 17:21:39+00:00| seen| https://infosec.exchange/users/cve/statuses/113827859560170423 2025-01-14 18:15:56+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpuapcvce2r 2025-01-19 05:00:00+00:00| seen|...

CVE-2024-13180

creationtimestamp| type| source ---|---|--- 2025-01-14 17:15:42+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpquypfex2f 2025-01-14 17:21:13+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/1532 2025-01-14 19:01:22+00:00| seen| https://t.me/cvedetector/15307...

Fortinet Warns of New Zero-Day Used in Attacks on Firewalls with Exposed Interfaces

Threat hunters are calling attention to a new campaign that has targeted Fortinet FortiGate firewall devices with management interfaces exposed on the public internet. "The campaign involved unauthorized administrative logins on management interfaces of firewalls, creation of new accounts, SSL VP...

CVE-2024-45301

creationtimestamp| type| source ---|---|--- 2025-01-10 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-026/ 2025-11-12 20:02:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5hgyzlf7e26...

Zero-Day Vulnerability in Ivanti VPN

It's being actively exploited...

CVE-2024-9523

creationtimestamp| type| source ---|---|--- 2025-01-09 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-023/...

CVE-2024-9525

creationtimestamp| type| source ---|---|--- 2025-01-09 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-025/...

Mirai Botnet Variant Exploits Four-Faith Router Vulnerability for DDoS Attacks

A Mirai botnet variant has been found exploiting a newly disclosed security flaw impacting Four-Faith industrial routers since early November 2024 with the goal of conducting distributed denial-of-service DDoS attacks. The botnet maintains approximately 15,000 daily active IP addresses, with the...

PhpSpreadsheet allows unauthorized Reflected XSS in `Convert-Online.php` file

Unauthorized Reflected XSS in Convert-Online.php file Product: Phpspreadsheet Version: version 3.6.0 CWE-ID: CWE-79: Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' CVSS vector v.3.1: 8.2 AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:N CVSS vector v.4.0: 8.3...

Fake 7-Zip Exploit Code Traced to AI-Generated Misinterpretation

A recent claim that a critical zero-day vulnerability existed in the popular open-source file archiver 7-Zip has been met with skepticism from the software's creator and other security researchers...

PT-2025-38298

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 140.0.7339.185 Microsoft Edge affected versions not specified Chromium affected versions not specified Brave affected versions not specified Opera affected versions not specified Vivaldi affected versions not...

CVE-2024-13048

creationtimestamp| type| source ---|---|--- 2024-12-30 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1732/ 2024-12-30 20:49:30+00:00| seen| https://infosec.exchange/users/cve/statuses/113743741894507245 2024-12-30 22:39:10+00:00| seen| https://t.me/cvedetector/13953...

CVE-2024-13043

creationtimestamp| type| source ---|---|--- 2024-12-30 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1727/ 2024-12-30 20:34:24+00:00| seen| https://infosec.exchange/users/cve/statuses/113743682834418784 2024-12-30 22:39:18+00:00| seen| https://t.me/cvedetector/13960...

CVE-2024-7074

creationtimestamp| type| source ---|---|--- 2024-12-30 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1741/...

CVE-2024-6914

creationtimestamp| type| source ---|---|--- 2024-12-30 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1740/ 2025-05-22 20:55:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpryt6jtjv27...

CVE-2024-12752

creationtimestamp| type| source ---|---|--- 2024-12-30 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1738/ 2024-12-30 20:19:23+00:00| seen| https://infosec.exchange/users/cve/statuses/113743623816619094 2024-12-30 22:39:15+00:00| seen| https://t.me/cvedetector/13957...

CVE-2024-13050

creationtimestamp| type| source ---|---|--- 2024-12-30 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1734/ 2024-12-30 21:04:25+00:00| seen| https://infosec.exchange/users/cve/statuses/113743800907443432 2024-12-30 22:39:11+00:00| seen| https://t.me/cvedetector/13955...

CVE-2024-13047

creationtimestamp| type| source ---|---|--- 2024-12-30 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1731/ 2024-12-30 20:49:30+00:00| seen| https://infosec.exchange/users/cve/statuses/113743741879163553 2024-12-30 22:39:09+00:00| seen| https://t.me/cvedetector/13952...

Top 10 Cybersecurity Trends to Expect in 2025

The 2025 cybersecurity landscape is increasingly complex, driven by sophisticated cyber threats, increased regulation, and rapidly evolving technology. In 2025, organizations will be challenged with protecting sensitive information for their customers while continuing to provide seamless and easy...