Cyber alerts

76 results

February 2025

Published Wednesday 19 February 2025 (12:59) (updated 19 February 2025)

Juniper Networks Releases Out-of-Cycle Security Bulletin for Critical Vulnerability

API authentication bypass vulnerability CVE-2025-21589 affects Session Smart Router, Conductor, and WAN Assurance Managed Routers

CC-4622 Medium

Published Friday 14 February 2025 (03:17) (updated 21 February 2025)

Security updates released for PostgreSQL

Proof-of-concept exploit code released for SQL injection vulnerability CVE-2025-1094

CC-4623 Medium

Published Friday 14 February 2025 (02:03) (updated 14 February 2025)

Active Exploitation of Critical Vulnerability Chain in SimpleHelp

CVE-2024-57726, CVE-2024-57727, and CVE-2024-57728 can be exploited in a chain to allow full compromise of a SimpleHelp server

CC-4621 Medium

Published Thursday 13 February 2025 (03:14) (updated 20 February 2025)

Palo Alto Networks Releases Security Updates for PAN-OS

Attack chain using CVE-2025-0108 and CVE-2025-0111 has been observed in the wild

CC-4620 Medium

Published Wednesday 12 February 2025 (04:41) (updated 12 February 2025)

Ivanti Releases February 2025 Security Updates

Three advisories cover vulnerabilities and weaknesses in Ivanti Cloud Services Application (CSA), Ivanti Neurons for MDM, Ivanti Connect Secure, Policy Secure, and Secure Access Client.

CC-4619 High

Published Wednesday 12 February 2025 (03:30) (updated 14 February 2025)

SonicOS SSL VPN Authentication Bypass Vulnerability (CVE-2024-53704)

A proof-of-concept exploit has been published for CVE-2024-53704, which affects SonicWall NGFWs

CC-4618 Medium

Published Wednesday 12 February 2025 (12:04) (updated 12 February 2025)

Microsoft Releases February 2025 Security Updates

Scheduled updates for Microsoft products, including security updates for 63 vulnerabilities, of which two are reported as exploited

CC-4615 Medium

Published Tuesday 11 February 2025 (03:21) (updated 11 February 2025)

Proof-of-Concept Exploit for AnyDesk Vulnerability (CVE-2024-12754)

Exploitation of this vulnerability could allow an attacker to read arbitrary files, including stored credentials

CC-4616 Medium

Published Tuesday 11 February 2025 (03:21) (updated 11 February 2025)

MicroDicom Releases DICOM Viewer Software Update

A privileged attacker could exploit CVE-2025-1002 to alter network traffic and perform a machine-in-the-middle (MitM) attack

CC-4614 Medium

Published Thursday 6 February 2025 (03:11) (updated 6 February 2025)

Cisco Releases Security Advisories for Multiple Products

Nine security advisories address multiple vulnerabilities, including one critical and two high severity advisories