Cybercriminals exploited a critical pre-authentication vulnerability in Marimo within 10 hours of public disclosure, targeting credentials and cloud …
Adobe has issued emergency security updates addressing a severe vulnerability in Acrobat Reader that cybercriminals are actively exploiting …
High-severity RCE in Apache ActiveMQ Classic went undetected for years. Jolokia and network connector abuse can load remote …
Federal agencies sound alarm over widespread vulnerabilities in programmable logic controllers as adversaries increasingly target operational technology systems across critical sectors.
A severe security flaw in EngageLab's widely-used SDK allowed malicious apps to bypass Android's sandbox protections and steal private data from 50 million devices, including 30 million crypto …
A severe vulnerability in Contemporary Controls building automation systems allows attackers to forge network packets and gain unauthorized control over critical infrastructure components.
A maximum-severity flaw in Contemporary Controls BASC 20T industrial controllers allows attackers to forge network packets for complete system control. The vulnerability affects critical infrastructure worldwide.
A dangerous code injection vulnerability in Ivanti's mobile management platform has been added to the federal government's priority threat list, signaling active exploitation in the wild.
Industrial automation products from major manufacturers contain serious vulnerabilities allowing local attackers to steal SQL credentials and compromise critical infrastructure databases.
A newly discovered access control flaw in Fortinet's FortiClient EMS platform has been flagged by federal authorities following confirmed exploitation attempts in the wild.
A recently disclosed vulnerability in OpenVPN, identified as CVE-2024-27459, allows remote attackers to crash VPN servers by sending malformed IPv6 packets.
Cisco has disclosed multiple high-severity vulnerabilities affecting its Meraki and Emergency Calling and Education (ECE) products.
Fortinet has announced the end of support for SSL VPN on several of its older devices, a move aimed at enhancing security and ensuring compatibility with modern cryptographic …
A critical vulnerability (CVE-2025-32433) has been identified in the Erlang/OTP SSH daemon, allowing unauthenticated attackers to execute arbitrary code remotely. This flaw arises from improper handling of SSH …
Cisco has disclosed a critical vulnerability (CVE-2024-20329) in the SSH subsystem of its Adaptive Security Appliance (ASA) Software.
Palo Alto Networks has disclosed a reflected cross-site scripting (XSS) vulnerability, identified as CVE-2025-0133, affecting the GlobalProtect gateway and portal features of its PAN-OS software.
A critical path equivalence vulnerability (CVE-2025-24813) has been identified in Apache Tomcat, allowing unauthenticated remote code execution (RCE) under specific server configurations.
A high-severity vulnerability, CVE-2025-36537, has been identified in the TeamViewer Remote Management solution for Windows.
A mid-sized medical clinic recently partnered with a software vendor to streamline operations. The deal looked great — modern tools, strong references, and fast deployment.
In the ever-evolving landscape of cybersecurity, vulnerabilities in widely-used software can pose significant threats to organizations and individuals alike.
SonicWall has issued an urgent patch to fix a critical vulnerability in its SonicOS firewall operating system, designated as CVE-2024-40766. This flaw, which has a CVSS severity score …
Shield53 Blog: SAP January 2025 Patch Day Resolves Critical NetWeaver Vulnerabilities Published Date: January 17, 2025Author: Shield53 Security TeamOverviewOn January 2025 Patch Day, SAP released 14 new security notes …
A critical vulnerability named "Regresshion" has been identified in OpenSSH, which allows attackers to execute arbitrary code remotely on affected systems.
In the fast-evolving world of cybersecurity, the role of the Chief Information Security Officer (CISO) has become increasingly crucial.
Palo Alto Networks issued a security advisory concerning a potential remote code execution (RCE) vulnerability in the PAN-OS management interface of their next-generation firewalls.
CVE-2025-21333, CVE-2025-21334, CVE-2025-21335A set of zero-day vulnerabilities have been identified in Microsoft Hyper-V, allowing attackers to escalate privileges and gain SYSTEM-level access.
Here is a list of the key vulnerabilities (CVEs) addressed by Palo Alto Networks in their recent security update, along with brief descriptions and recommended remediation actions:1.
In December 2024, Microsoft identified a critical security issue where developers were incorporating publicly disclosed ASP.NET machine keys into their applications.
Fortinet recently disclosed a critical vulnerability (FG-IR-24-029) affecting FortiProxy and FortiOS, which could allow an attacker to execute arbitrary code. The vulnerability, identified as CVE-2024-XXXX, exploits improper error …
CVE-2024-28987 is a critical vulnerability in SolarWinds Web Help Desk (WHD) that allows unauthenticated attackers to exploit hardcoded credentials.
Security researchers have recently discovered a series of vulnerabilities within the widely used CUPS (Common UNIX Printing System), an open-source system utilized for managing printing tasks in Linux …
A critical vulnerability, identified as CVE-2024-49113, has been discovered in Windows Server's Lightweight Directory Access Protocol (LDAP).
The Shield53 Threat Intelligence Team is issuing this bulletin to inform you of two critical vulnerabilities impacting Cisco Smart Licensing Utility (CSLU).
SolarWinds, a leading IT management software provider, has recently disclosed two significant vulnerabilities, CVE-2024-28990 and CVE-2024-28991, in its Access Rights Manager (ARM) platform.
In the latest security update, Microsoft has disclosed several critical vulnerabilities affecting Windows and Microsoft Configuration Manager. These vulnerabilities pose significant risks, including remote code execution (RCE) and …
F5 Networks recently addressed multiple high-severity vulnerabilities affecting their BIG-IP and NGINX Plus products.
More information here Those unable to apply the Threat Prevention mitigation can mitigate by temporarily disabling device telemetry until the device is upgraded to a fixed PAN-OS version. …
Published Date: January 17, 2025Critical Security Vulnerability AlertCVE-2025-21298: Microsoft Windows OLE RCE VulnerabilityOverviewA critical Remote Code Execution (RCE) vulnerability has been identified in Microsoft Windows Object Linking and …
CVE: CVE-2024-21410 Severity: CRITICAL Priority: CRITICAL Summary Today, Microsoft issued a renewed security advisory cautioning about a critical vulnerability within Exchange Server, which was exploited as a zero-day …
In November 2024, two critical vulnerabilities—CVE-2024-8068 and CVE-2024-8069—were identified in Citrix's Session Recording Manager, a component of Citrix Virtual Apps and Desktops.
Cisco recently addressed a critical vulnerability in its VPN solutions, notably affecting Cisco ASA and Firepower Threat Defense (FTD).