Russian Coldriver Hackers Deploy Malware to Target Western Officials
Russian threat group Coldriver has expanded its targeting of Western officials with the use of malware to steal sensitive data,...
Month: January 2024
CISA: CISA Adds Three Known Exploited Vulnerabilities to Catalog
CISA Adds Three Known Exploited Vulnerabilities to Catalog CISA has added three new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based...
CISA: Incident Response Guide for the WWS Sector
Incident Response Guide for the WWS Sector Today, CISA, the Federal Bureau of Investigation (FBI), and the Environmental Protection Agency...
CISA: VMware Releases Security Advisory for Aria Automation
VMware Releases Security Advisory for Aria Automation VMware released a security advisory to address a vulnerability (CVE-2023-34063) in Aria Automation....
CISA: CISA Adds One Known Exploited Vulnerability to Catalog
CISA Adds One Known Exploited Vulnerability to Catalog CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based...
CISA: Citrix Releases Security Updates for NetScaler ADC and NetScaler Gateway
Citrix Releases Security Updates for NetScaler ADC and NetScaler Gateway Citrix released security updates to address vulnerabilities (CVE-2023-6548 and CVE-2023-6549)...
CISA: CISA Issues Emergency Directive on Ivanti Vulnerabilities
CISA Issues Emergency Directive on Ivanti Vulnerabilities CISA has issued Emergency Directive (ED) 24-01 Mitigate Ivanti Connect Secure and Ivanti...
CISA: Atlassian Releases Security Updates for Multiple Products
Atlassian Releases Security Updates for Multiple Products Atlassian released a security advisory to address a vulnerability (CVE-2023-22527) in out-of-date versions...
CISA: CISA Releases One Industrial Control Systems Advisory
CISA Releases One Industrial Control Systems Advisory CISA released one Industrial Control Systems (ICS) advisory on January 18, 2024. These...
CISA: Drupal Releases Security Advisory for Drupal Core
Drupal Releases Security Advisory for Drupal Core Drupal released a security advisory to address a vulnerability affecting multiple Drupal core versions....
CISA: Oracle Releases Critical Patch Update Advisory for January 2024
Oracle Releases Critical Patch Update Advisory for January 2024 Oracle released its Critical Patch Update Advisory for January 2024 to...
ADCSync – Use ESC1 To Perform A Makeshift DCSync And Dump Hashes
This is a tool I whipped up together quickly to DCSync utilizing ESC1. It is quite slow but otherwise an...
CISA: CISA Issues Emergency Directive on Ivanti Vulnerabilities
CISA Issues Emergency Directive on Ivanti Vulnerabilities CISA has issued Emergency Directive (ED) 24-01 Mitigate Ivanti Connect Secure and Ivanti...
CISA: VMware Releases Security Advisory for Aria Automation
VMware Releases Security Advisory for Aria Automation VMware released a security advisory to address a vulnerability (CVE-2023-34063) in Aria Automation....
Preventing Data Loss: Backup and Recovery Strategies for Exchange Server Administrators
In the current digital landscape, data has emerged as a crucial asset for organizations, akin to currency. It's the lifeblood...
Experts Warn of macOS Backdoor Hidden in Pirated Versions of Popular Software
Pirated applications targeting Apple macOS users have been observed containing a backdoor capable of granting attackers remote control to infected...
Active Exploitation of Critical Vulnerability in Ivanti Products
There are reports of active exploitation of a critical authentication bypass vulnerability (CVE-2023-35082) in Ivanti's Endpoint Manager Mobile (EPMM) and...
Oracle Outside In Technology unspecified | CVE-2024-20930
NAME__________Oracle Outside In Technology unspecifiedPlatforms Affected:Oracle Outside In Technology 8.5.6Risk Level:6.3Exploitability:UnprovenConsequences:Unknown DESCRIPTION__________An unspecified vulnerability in Oracle Outside In Technology related...
Oracle Knowledge Management unspecified | CVE-2024-20948
NAME__________Oracle Knowledge Management unspecifiedPlatforms Affected:Oracle Knowledge Management 12.2.3 Oracle Knowledge Management 12.2.13Risk Level:6.1Exploitability:UnprovenConsequences:Unknown DESCRIPTION__________An unspecified vulnerability in Oracle Knowledge Management...
PAX Technology A920Pro/A50 devices code execution | CVE-2023-42135
NAME__________PAX Technology A920Pro/A50 devices code executionPlatforms Affected:PAX Technology A920 Pro 11.1.50_20230614 PAX Technology A50 11.1.50_20230614Risk Level:6.8Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________PAX Technology A920Pro/A50...
Oracle WebCenter Sites unspecified | CVE-2024-20908
NAME__________Oracle WebCenter Sites unspecifiedPlatforms Affected:Oracle WebCenter Sites 12.2.1.4.0Risk Level:6.1Exploitability:UnprovenConsequences:Unknown DESCRIPTION__________An unspecified vulnerability in Oracle WebCenter Sites related to the Advanced...
Tenda A15 buffer overflow | CVE-2024-0531
NAME__________Tenda A15 buffer overflowPlatforms Affected:Tenda A15 15.13.07.13Risk Level:7.2Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________Tenda A15 is vulnerable to a stack-based buffer overflow, caused by...
StackIdeas EasyDiscuss SQL injection | CVE-2023-51810
NAME__________StackIdeas EasyDiscuss SQL injectionPlatforms Affected:StackIdeas EasyDiscuss 5.0.5 StackIdeas EasyDiscuss 5.0.10Risk Level:6.5Exploitability:HighConsequences:Obtain Information DESCRIPTION__________StackIdeas EasyDiscuss is vulnerable to SQL injection. A...
Oracle ZFS Storage Appliance Kit unspecified | CVE-2024-20959
NAME__________Oracle ZFS Storage Appliance Kit unspecifiedPlatforms Affected:Oracle ZFS Storage Appliance Kit 8.8Risk Level:4.4Exploitability:UnprovenConsequences:Unknown DESCRIPTION__________An unspecified vulnerability in Oracle ZFS Storage...
