2024

CISA Warns of Critical Vulnerabilities: CVE-2024-20481 and CVE-2024-37383 Require Immediate Attention

October 25, 2024 / 3 minutes of reading

Overview The Cybersecurity and Infrastructure Security Agency (CISA) has issued urgent advisories regarding two vulnerabilities that pose substantial risks to organizations: CVE-2024-20481, a denial-of-service (DoS) vulnerability affecting Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD), and CVE-2024-37383, a cross-site scripting (XSS) vulnerability in RoundCube Webmail. Both vulnerabilities highlight the necessity for immediate action

CISA Warns of Critical Vulnerabilities: CVE-2024-20481 and CVE-2024-37383 Require Immediate Attention Read More »

Cyble Sensors Detect New Attacks on CMS; IoT Exploits Continue

October 25, 2024 / 5 minutes of reading

Cyble’s Vulnerability Intelligence unit has detected cyberattacks on the open source SPIP publishing system, while IoT devices and other recent exploits continue.

Cyble Sensors Detect New Attacks on CMS; IoT Exploits Continue Read More »

CISA Flags Critical Vulnerability (CVE-2024-47575) in Fortinet’s FortiManager

October 24, 2024 / 3 minutes of reading

CISA has added Fortinet’s FortiManager to its KEV catalog due to a critical CVE-2024-47575 vulnerability, posing serious risks to organizations.

CISA Flags Critical Vulnerability (CVE-2024-47575) in Fortinet’s FortiManager Read More »

Weekly Industrial Control System (ICS) Vulnerability Intelligence Report: New Flaws Affecting Siemens, Schneider Electric, and More

October 24, 2024 / 3 minutes of reading

Cyble Research & Intelligence Labs (CRIL) reports 13 new ICS vulnerabilities identified by CISA, urging organizations to act swiftly to mitigate risks.

Weekly Industrial Control System (ICS) Vulnerability Intelligence Report: New Flaws Affecting Siemens, Schneider Electric, and More Read More »

CISA Adds ScienceLogic SL1 Vulnerability to Known Exploited Vulnerabilities (KEV) Catalog

October 23, 2024 / 3 minutes of reading

CISA has added a critical vulnerability (CVE-2024-9537) to its catalog for ScienceLogic SL1. The vulnerability involves a remote code execution flaw in a third-party utility.

CISA Adds ScienceLogic SL1 Vulnerability to Known Exploited Vulnerabilities (KEV) Catalog Read More »

CISA Warns About New Microsoft SharePoint Vulnerability CVE-2024-38094: High Risks and Immediate Patching Needed

October 23, 2024 / 3 minutes of reading

CISA has issued a critical advisory on a high-severity SharePoint vulnerability (CVE-2024-38094) that allows code injection by authenticated attackers.

CISA Warns About New Microsoft SharePoint Vulnerability CVE-2024-38094: High Risks and Immediate Patching Needed Read More »