Aggregator
CVE-2012-1838 | LG-Nortel ELO GS24M switch Web Management Interface improper authentication (VU#523027 / XFDB-74237)
CVE-2012-1840 | AjaXplorer up to 4.0.3 improper authentication (VU#504019 / XFDB-74305)
CVE-2011-4858 | Apache Tomcat up to 6.0.6 resource management (RHSA-2012:0475 / VU#903934)
CVE-2011-4885 | Oracle Secure Backup 10.3.0.3/10.4.0.1 PHP input validation (VU#903934 / EDB-18296)
23rd December – Threat Intelligence Report
For the latest discoveries in cyber research for the week of 23rd December, please download our Threat Intelligence Bulletin. TOP ATTACKS AND BREACHES The State of Rhode Island has issued a notification that RIBridges, the state’s portal for social services, has suffered a cyber attack and data leak. According to the reports, the breach was […]
The post 23rd December – Threat Intelligence Report appeared first on Check Point Research.
CVE-2000-0172 | Matt Kimball And Roger Wolff mtr 0.28/0.41 Setuid privileges management (EDB-19796 / BID-1038)
全年最低价| Winxvideo AI – 音频/图片/视频提升和转换工具
CISA Adds One Known Exploited Vulnerability to Catalog
CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation.
- CVE-2021-44207 Acclaim Systems USAHERDS Use of Hard-Coded Credentials Vulnerability
These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.
Binding Operational Directive (BOD) 22-01: Reducing the Significant Risk of Known Exploited Vulnerabilities established the Known Exploited Vulnerabilities Catalog as a living list of known Common Vulnerabilities and Exposures (CVEs) that carry significant risk to the federal enterprise. BOD 22-01 requires Federal Civilian Executive Branch (FCEB) agencies to remediate identified vulnerabilities by the due date to protect FCEB networks against active threats. See the BOD 22-01 Fact Sheet for more information.
Although BOD 22-01 only applies to FCEB agencies, CISA strongly urges all organizations to reduce their exposure to cyberattacks by prioritizing timely remediation of Catalog vulnerabilities as part of their vulnerability management practice. CISA will continue to add vulnerabilities to the catalog that meet the specified criteria.
5 Major Cyber Attacks in December 2024
The cybersecurity research team of ANY.RUN found and analyzed a bunch of emerging threats with the help of our mighty Interactive Sandbox and Threat Intelligence Lookup. We’ve been sharing their findings via X and in our blog. Here is a summary on the most interesting insights from December 2024. Phishing Campaigns targeting Microsoft’s Azure Blob […]
The post 5 Major Cyber Attacks in December 2024 appeared first on ANY.RUN's Cybersecurity Blog.