Cyber alerts

76 results

March 2025

CC-4633 Medium

Published Monday 17 March 2025 (04:13) (updated 17 March 2025)

Exploitation of Apache Tomcat Vulnerability CVE-2025-24813

Exploitation of CVE-2025-24813 could allow an attacker to achieve RCE, view security sensitive files, or inject content

CC-4632 Medium

Published Monday 17 March 2025 (02:39) (updated 20 March 2025)

Critical Security Incident involving GitHub Action tj-action/changed-files

Projects using the vulnerable action are at risk of exposed CI/CD secrets

CC-4631 Medium

Published Thursday 13 March 2025 (03:23) (updated 13 March 2025)

Cisco Releases Security Advisories for Cisco IOS XR Software

10 security advisories address multiple vulnerabilities, including seven high and three medium severity advisories

CC-4630 Medium

Published Wednesday 12 March 2025 (04:34) (updated 12 March 2025)

Apple Releases Security Updates for Multiple Products

Security updates include remediation for exploited vulnerability CVE-2025-24201, which affects iOS, iPadOS, and macOS

CC-4629 Medium

Published Wednesday 12 March 2025 (03:00) (updated 17 April 2025)

Microsoft Releases March 2025 Security Updates

Scheduled updates for Microsoft products, including security updates for 57 vulnerabilities, of which six are reported as exploited

CC-4628 Medium

Published Thursday 6 March 2025 (02:11) (updated 6 March 2025)

Cisco Releases Security Advisory for Secure Client

CVE-2025-20206 could allow an attacker to execute arbitrary code with system privileges

CC-4627 High

Published Tuesday 4 March 2025 (04:11) (updated 6 March 2025)

Critical Zero-day Vulnerabilities in VMware ESXi, Workstation, and Fusion

Broadcom has addressed three exploited vulnerabilities that, when chained, can allow an attacker to access the hypervisor through a running virtual machine

February 2025

CC-4626 Medium

Published Wednesday 26 February 2025 (05:35) (updated 26 February 2025)

Proof-of-Concept Exploits Released for RSync Vulnerabilities

Vulnerabilities in RSync could allow an attacker to execute arbitrary code or perform path traversal

CC-4625 Medium

Published Monday 24 February 2025 (03:20) (updated 24 February 2025)

Medixant Releases Security Update for RadiAnt DICOM Viewer

Successful exploitation of CVE-2025-1001 could allow an attacker to perform a machine-in-the-middle attack (MITM)

CC-4617 Medium

Published Monday 24 February 2025 (01:31) (updated 24 February 2025)

F5 Releases Quarterly Security Notification (February 2025) Affecting BIG-IP Products

One of the 13 high impact advisories addresses the command injection vulnerability CVE-2025-20029, which could lead to arbitrary system command execution