Cyber alerts

102 results

February 2025

Published Wednesday 12 February 2025 (04:41) (updated 12 February 2025)

Ivanti Releases February 2025 Security Updates

Three advisories cover vulnerabilities and weaknesses in Ivanti Cloud Services Application (CSA), Ivanti Neurons for MDM, Ivanti Connect Secure, Policy Secure, and Secure Access Client.

CC-4619 High

Published Wednesday 12 February 2025 (03:30) (updated 14 February 2025)

SonicOS SSL VPN Authentication Bypass Vulnerability (CVE-2024-53704)

A proof-of-concept exploit has been published for CVE-2024-53704, which affects SonicWall NGFWs

CC-4618 Medium

Published Wednesday 12 February 2025 (12:04) (updated 12 February 2025)

Microsoft Releases February 2025 Security Updates

Scheduled updates for Microsoft products, including security updates for 63 vulnerabilities, of which two are reported as exploited

CC-4615 Medium

Published Tuesday 11 February 2025 (03:21) (updated 11 February 2025)

Proof-of-Concept Exploit for AnyDesk Vulnerability (CVE-2024-12754)

Exploitation of this vulnerability could allow an attacker to read arbitrary files, including stored credentials

CC-4616 Medium

Published Tuesday 11 February 2025 (03:21) (updated 11 February 2025)

MicroDicom Releases DICOM Viewer Software Update

A privileged attacker could exploit CVE-2025-1002 to alter network traffic and perform a machine-in-the-middle (MitM) attack

CC-4614 Medium

Published Thursday 6 February 2025 (03:11) (updated 6 February 2025)

Cisco Releases Security Advisories for Multiple Products

Nine security advisories address multiple vulnerabilities, including one critical and two high severity advisories

January 2025

CC-4613 Medium

Published Friday 31 January 2025 (04:13) (updated 31 January 2025)

TeamViewer Releases Security Updates for Privilege Escalation Vulnerability

A vulnerability has been discovered in the TeamViewer Clients for Windows

CC-4612 Medium

Published Friday 31 January 2025 (02:34) (updated 26 February 2025)

Potential Backdoor Embedded in Contec Health CMS8000 Patient Monitor Firmware

CISA has found evidence of Contec CMS8000 and re-labelled Epsimed MN-120 devices beaconing to a public IP address

CC-4611 Medium

Published Tuesday 28 January 2025 (03:31) (updated 29 January 2025)

Apple Releases Security Updates for Multiple Products

Security updates include remediation for an exploited zero-day privilege escalation vulnerability affecting iOS, iPadOS, and macOS

CC-4610 Medium

Published Monday 27 January 2025 (04:58) (updated 4 February 2025)

Active Exploitation Reported for CVE-2025-0411 in 7-Zip

Observed exploitation has involved targeted spear-phishing campaigns, using homoglyph attacks to spoof document extensions to lure users