Analysis of vulnerabilities under active exploitation, zero-days, patch cycles and exposure reduction.
73 reports
The Windows Print Spooler service has once again become a focal point for attackers, as Microsoft addressed a critical remote code execution (RCE) vulnerability in its June 2024 Patch Tuesday…
In June 2024, Microsoft addressed a serious Denial of Service (DoS) vulnerability in Windows Hyper-V through the release of CVE-2024-31156 . Hyper-V, a core virtualization technology widely used…
In June 2024, Microsoft released a crucial security update addressing CVE-2024-31821 , a critical elevation of privilege (EoP) vulnerability affecting Microsoft Outlook . This vulnerability, if…
Microsoft’s June 2024 Patch Tuesday brought important security updates addressing 78 vulnerabilities across a range of products, including Windows , Microsoft Office , Azure , and Microsoft Edge .…
In June 2024, the TellYouThePass ransomware group exploited a critical vulnerability in PHP for Windows (CVE-2024-4577), a widespread and widely-used scripting language. This vulnerability allowed…
Microsoft's Patch Tuesday in May 2024 addressed 60 vulnerabilities across a wide range of its products, including Windows, Microsoft Office, and Azure. Among these, several critical zero-day…
NHS Dumfries and Galloway, a Scottish healthcare provider, fell victim to a significant ransomware attack led by the group known as INC Ransom. This incident, which unfolded in March 2024, led to…
The recent security breach at MITRE Corporation has raised significant concerns, given the organization's critical role in cybersecurity research and development. In January 2024, a…
Recently, CVE-2024-4058 has emerged as a significant security vulnerability within Google Chrome, attributed to a use-after-free error in the V8 JavaScript engine. This blog post aims to provide a…
Introduction Line Dancer is a sophisticated shellcode loader that specifically targets Cisco Adaptive Security Appliance (ASA) devices. Recently analyzed by the National Cyber Security Centre…
A critical vulnerability identified as CVE-2023-20269 has been actively exploited in Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) software, specifically targeting the…
A critical vulnerability, designated as CVE-2024-3400, has been identified within the GlobalProtect component of Palo Alto Networks' PAN-OS. This zero-day flaw is classified under CWE-77 (Command…
