U.S. Charges Chinese Hacker for Exploiting Zero-Day in 81,000 Sophos Firewalls

The U.S. government on Tuesday unsealed charges against a Chinese national for allegedly breaking into thousands of Sophos firewall devices globally in 2020. Guan Tianfeng aka gbigmao and gxiaomao, who is said to have worked at Sichuan Silence Information Technology Company, Limited, has been...

CVE-2024-12548

creationtimestamp| type| source ---|---|--- 2024-12-11 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1680/ 2025-02-11 20:15:59+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhwhz5vmwk2c...

CVE-2024-12550

creationtimestamp| type| source ---|---|--- 2024-12-11 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1678/ 2025-02-11 20:16:05+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhwhzcxzde2a 2025-02-20 23:26:55+00:00| seen|...

CVE-2024-12549

creationtimestamp| type| source ---|---|--- 2024-12-11 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1679/ 2025-02-11 20:16:02+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhwhzaf5ug2a...

CVE-2024-11949

creationtimestamp| type| source ---|---|--- 2024-12-11 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1672/ 2024-12-11 21:58:36+00:00| seen| https://infosec.exchange/users/cve/statuses/113636430016828724 2024-12-12 02:56:45+00:00| seen| https://t.me/cvedetector/12664...

Patch Tuesday, December 2024 Edition

Microsoft today released updates to plug at least 70 security holes in Windows and Windows software, including one vulnerability that is already being exploited in active attacks. The zero-day seeing exploitation involves CVE-2024-49138, a security weakness in the Windows Common Log File System...

Patch Tuesday - December 2024

Microsoft is addressing 70 vulnerabilities this December 2024 Patch Tuesday. Microsoft has evidence of in-the-wild exploitation and public disclosure for one of the vulnerabilities published today, and this is reflected in a CISA KEV entry. For the third month in a row, Microsoft has published...

Patch Tuesday - December 2024

Microsoft is addressing 70 vulnerabilities this December 2024 Patch Tuesday. Microsoft has evidence of in-the-wild exploitation and public disclosure for one of the vulnerabilities published today, and this is reflected in a CISA KEV entry. For the third month in a row, Microsoft has published...

CVE-2024-49082

creationtimestamp| type| source ---|---|--- 2024-12-10 17:33:56+00:00| seen| https://www.thezdi.com/blog/2024/12/10/the-december-2024-security-update-review 2024-12-10 19:07:30+00:00| seen| https://infosec.exchange/users/cve/statuses/113630094912090814 2024-12-11 05:00:00+00:00| seen|...

CVE-2024-49069

creationtimestamp| type| source ---|---|--- 2024-12-10 17:33:56+00:00| seen| https://www.thezdi.com/blog/2024/12/10/the-december-2024-security-update-review 2025-01-08 05:38:53+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/650 2025-09-16 23:16:38+00:00| seen|...

Ongoing Phishing and Malware Campaigns in December 2024

Cyber attackers never stop inventing new ways to compromise their targets. That's why organizations must stay updated on the latest threats. Here's a quick rundown of the current malware and phishing attacks you need to know about to safeguard your infrastructure before they reach you. Zero-day...

Critical Windows Zero-Day Alert: No Patch Available Yet for Users

Protect your systems with automated patching and server hardening strategies to defend against vulnerabilities like the NTLM zero-day.…...

CVE-2024-11158

creationtimestamp| type| source ---|---|--- 2024-12-05 17:44:45+00:00| seen| https://infosec.exchange/users/cve/statuses/113601457861462098 2024-12-05 20:22:53+00:00| seen| https://t.me/cvedetector/12130 2024-12-10 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1650/...

CVE-2024-11872

creationtimestamp| type| source ---|---|--- 2024-12-04 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1646/ 2024-12-11 21:58:35+00:00| seen| https://infosec.exchange/users/cve/statuses/113636429972354770 2024-12-12 02:56:47+00:00| seen| https://t.me/cvedetector/12666...

CVE-2024-49420

creationtimestamp| type| source ---|---|--- 2024-12-03 06:25:41+00:00| seen| https://infosec.exchange/users/cve/statuses/113587463178602343 2024-12-03 08:08:14+00:00| seen| https://t.me/cvedetector/11852 2025-04-09 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-227/...

CVE-2024-49419

creationtimestamp| type| source ---|---|--- 2024-12-03 06:25:41+00:00| seen| https://infosec.exchange/users/cve/statuses/113587463163015231 2024-12-03 08:08:13+00:00| seen| https://t.me/cvedetector/11851 2025-04-09 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-226/...

How Attackers Use Corrupted Files to Slip Past Security

New zero-day attack bypasses antivirus, sandboxes, and spam filters using corrupted files. Learn how ANY.RUN’s sandbox detects and…...

CVE-2024-46906

creationtimestamp| type| source ---|---|--- 2024-12-02 17:05:14+00:00| seen| https://t.me/cvedetector/11792 2024-12-02 18:25:11+00:00| seen| https://t.me/ZeroDayru/334 2024-12-03 19:14:22+00:00| seen| https://infosec.exchange/users/screaminggoat/statuses/113590485768782792 2024-12-12...

CVE-2024-51769

creationtimestamp| type| source ---|---|--- 2024-12-02 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1633/ 2025-09-09 20:51:37+00:00| seen| MISP/e0a0042d-e47b-4875-b781-99d4428af3c2...

CVE-2024-51770

creationtimestamp| type| source ---|---|--- 2024-12-02 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1634/ 2025-09-09 20:51:37+00:00| seen| MISP/e0a0042d-e47b-4875-b781-99d4428af3c2...