-
CVE-2024-45555 – Citrix Hypervisor Memory Corruption Vulnerability
CVE ID : CVE-2024-45555 Published : Jan. 6, 2025, 11:15 a.m. | 3 hours, 12 minutes ago Description : Memory corruption can occur if an already verified IFS2 image is overwritten, bypassing boot verification. This allows unauthorized programs to be injected into security-sensitive images, enabling the booting of a tampered IFS2 system image. Severity: 8.4 | HIGH…
-
Top Cybersecurity Certifications to Boost Your Career in 2025
Top Cybersecurity Certifications to Boost Your Career in 2025 Cybersecurity professionals are the frontline warriors combating hackers, hacktivists, and ransomware groups. To fight with these cyber criminals, the world needs cybersecurity expertise who can acces … Read more Published Date: Jan 06, 2025 (1 hour, 27 minutes ago) Vulnerabilities has been mentioned in this article. CVE-2024-43441 CVE-2024-38856…
-
Haunted — Blue Team Labs Online Write-up
Haunted — Blue Team Labs Online Write-up HauntedOne of the company’s websites has been defaced, raising alarms. Collaborate with other analysts to uncover the identity of the adversary and assess the situation.Category: Threat IntelligenceTo … Read more Published Date: Jan 06, 2025 (4 hours, 3 minutes ago) Vulnerabilities has been mentioned in this article. Go to Source
-
⚡ THN Weekly Recap: Top Cybersecurity Threats, Tools and Tips [6 Jan]
⚡ THN Weekly Recap: Top Cybersecurity Threats, Tools and Tips [6 Jan] Every tap, click, and swipe we make online shapes our digital lives, but it also opens doors—some we never meant to unlock. Extensions we trust, assistants we rely on, and even the codes we scan are t … Read more Published Date: Jan…
-
CVE-2024-43452: PoC Exploit Released for Windows Elevation of Privilege Bug
CVE-2024-43452: PoC Exploit Released for Windows Elevation of Privilege Bug Security researchers published the technical details and a proof-of-concept (PoC) exploit code for CVE-2024-43452 (CVSS 7.5), a Windows Registry Elevation of Privilege vulnerability. Reported by Mateu … Read more Published Date: Jan 06, 2025 (12 hours, 15 minutes ago) Vulnerabilities has been mentioned in this article. CVE-2024-9140…
-
EAGERBEE, with updated and novel components, targets the Middle East
EAGERBEE, with updated and novel components, targets the Middle East Introduction In our recent investigation into the EAGERBEE backdoor, we found that it was being deployed at ISPs and governmental entities in the Middle East. Our analysis uncovered new components use … Read more Published Date: Jan 06, 2025 (6 hours, 27 minutes ago) Vulnerabilities has been…
-
CVE-2024-10957: UpdraftPlus WordPress Plugin Vulnerability
CVE-2024-10957: UpdraftPlus WordPress Plugin Vulnerability CVE-2024-10957 is a high-severity vulnerability affecting the UpdraftPlus: WP Backup & Migration Plugin for WordPress. This vulnerability, present in versions up to and including 1.24.11, enables atta … Read more Published Date: Jan 06, 2025 (5 hours, 9 minutes ago) Vulnerabilities has been mentioned in this article. CVE-2024-10957 CVE-2024-12108 CVE-2024-11944 CVE-2024-12987 CVE-2024-49113…
-
CVE-2024-9138 and CVE-2024-9140 (CVSS 9.8): Moxa Calls for Immediate Security Action
CVE-2024-9138 and CVE-2024-9140 (CVSS 9.8): Moxa Calls for Immediate Security Action Moxa, a leading provider of industrial networking and communication solutions, has issued a security advisory warning of two critical vulnerabilities affecting their cellular routers, secure routers, … Read more Published Date: Jan 06, 2025 (12 hours, 23 minutes ago) Vulnerabilities has been mentioned in this article.…
-
CVE-2024-43405 Vulnerability in Nuclei
CVE-2024-43405 Vulnerability in Nuclei CVE-2024-43405 is a high severity vulnerability identified in Nuclei, a widely used open-source vulnerability scanner. This vulnerability, affecting versions 3.0.0 to 3.3.1, allows attackers to bypass … Read more Published Date: Jan 06, 2025 (12 hours, 19 minutes ago) Vulnerabilities has been mentioned in this article. CVE-2024-12108 CVE-2024-11944 CVE-2024-12987 CVE-2024-49113 CVE-2024-43405 Go to…
-
Hackers Exploit Social Security Administration Branding to Deliver ConnectWise RAT
Hackers Exploit Social Security Administration Branding to Deliver ConnectWise RAT In a concerning escalation of phishing tactics, hackers are spoofing the United States Social Security Administration (SSA) to distribute the ConnectWise Remote Access Tool (RAT), a campaign uncovered … Read more Published Date: Jan 06, 2025 (12 hours, 51 minutes ago) Vulnerabilities has been mentioned in this…