Analysis of vulnerabilities under active exploitation, zero-days, patch cycles and exposure reduction.
73 reports
On 11 February 2025, Microsoft released Patch Tuesday security updates addressing 55 CVEs , including three Critical remote code execution (RCE) vulnerabilities and four zero-days . Two of the…
On 19 November 2024, reporting indicated that financial software provider Finastra was investigating an alleged data breach involving its secure file transfer capability used for transmitting…
Microsoft has released its December Patch Tuesday security updates, addressing 71 vulnerabilities across its product ecosystem. The release includes 16 Critical-rated flaws and one actively…
CVE-2024-38094 is a Microsoft SharePoint Server remote code execution (RCE) vulnerability rooted in unsafe deserialisation (CWE-502) and scored 7.2 (High) under CVSS v3.1 by Microsoft. ( NVD ) It…
In a financially motivated campaign attributed to the Lazarus Group’s BlueNoroff ecosystem, attackers weaponised a Google Chrome zero-day in the V8 JavaScript engine to compromise victims who…
CVE-2024-11120 is a critical OS command injection vulnerability affecting certain end-of-life (EOL) GeoVision video server/DVR and licence-plate-recognition device lines, enabling unauthenticated…
CVE-2024-47575 is a critical “missing authentication for a critical function” vulnerability (CWE-306) in Fortinet FortiManager and FortiManager Cloud that can enable unauthenticated remote…
Ivanti's Cloud Services Appliance (CSA) has become a prime target for nation-state actors exploiting zero-day vulnerabilities to gain unauthorised access to critical infrastructure. Fortinet’s…
Ivanti recently disclosed three newly identified zero-day vulnerabilities in its Cloud Services Appliance (CSA), all of which are actively exploited in the wild. These vulnerabilities, tracked as…
Microsoft’s October 2024 Patch Tuesday release addresses 118 security vulnerabilities, including five zero-day vulnerabilities. These zero-days impact various components, from MSHTML to Microsoft…
On September 26, 2024, a set of severe vulnerabilities affecting the Common UNIX Printing System (CUPS) was publicly disclosed, prompting immediate concern across the cybersecurity community.…
In the June 2024 Patch Tuesday updates, Microsoft addressed a critical remote code execution (RCE) vulnerability in Microsoft SharePoint Server . This vulnerability, identified as CVE-2024-33210 ,…
