Cyber alerts

76 results

Loading...

January 2025

Published Friday 31 January 2025 (04:13) (updated 31 January 2025)

TeamViewer Releases Security Updates for Privilege Escalation Vulnerability

A vulnerability has been discovered in the TeamViewer Clients for Windows

Published Friday 31 January 2025 (02:34) (updated 26 February 2025)

Potential Backdoor Embedded in Contec Health CMS8000 Patient Monitor Firmware

CISA has found evidence of Contec CMS8000 and re-labelled Epsimed MN-120 devices beaconing to a public IP address

Published Tuesday 28 January 2025 (03:31) (updated 29 January 2025)

Apple Releases Security Updates for Multiple Products

Security updates include remediation for an exploited zero-day privilege escalation vulnerability affecting iOS, iPadOS, and macOS

Published Monday 27 January 2025 (04:58) (updated 4 February 2025)

Active Exploitation Reported for CVE-2025-0411 in 7-Zip

Observed exploitation has involved targeted spear-phishing campaigns, using homoglyph attacks to spoof document extensions to lure users

Published Thursday 23 January 2025 (02:27) (updated 23 January 2025)

Exploitation of Critical Vulnerability CVE-2025-23006 in SonicWall SMA1000 Series Appliances

Exploitation could lead to execution of arbitrary OS commands in SonicWall SMA1000 Series Appliances

Published Friday 17 January 2025 (04:05) (updated 17 January 2025)

Proof-of-Concept Exploit Released for CVE-2024-53691 in QNAP QTS and QuTS NAS

Security researchers claim CVE-2024-53691 could lead to RCE

Published Wednesday 15 January 2025 (04:12) (updated 15 January 2025)

Microsoft Releases January 2025 Security Updates

Scheduled updates for Microsoft products, including security updates for 159 vulnerabilities, with three reported as actively exploited

Published Wednesday 15 January 2025 (02:27) (updated 11 March 2025)

Ivanti Releases January 2025 Updates for EPM

Updates address 4 critical and 12 high severity vulnerabilities

Published Wednesday 15 January 2025 (02:22) (updated 15 January 2025)

Fortinet Releases Security Advisory for FortiSwitch

Exploitation of critical vulnerability CVE-2023-37936 could allow an unauthenticated attacker to perform RCE

Published Tuesday 14 January 2025 (04:58) (updated 14 January 2025)

Active Exploitation of Zero-Day Vulnerability CVE-2024-55591 in FortiOS and FortiProxy

CVE-2024-55591 could allow an unauthenticated remote attacker to gain super-admin privileges

1
2
3
4
5
6
7
8