Analysis of vulnerabilities under active exploitation, zero-days, patch cycles and exposure reduction.
73 reports
In a significant development reported by Akamai's Security Intelligence Response Team (SIRT) in late October 2023, heightened malicious activity was detected, indicating the exploitation of…
A critical security flaw in Windows SmartScreen, a component of Windows Defender, has recently been highlighted due to the public release of a proof-of-concept (PoC) exploit. This vulnerability,…
Recent academic research has uncovered a significant vulnerability in Secure Shell (SSH) servers, a widely used protocol for secure communication in tasks like remote system access, file…
APT29, a Russian hacker group, has strategically employed the CVE-2023-38831 vulnerability in WinRAR in a series of cyberattacks targeting embassies. Known for its various aliases, including Cozy…
Boeing, a renowned aerospace company, recently fell victim to a cybersecurity incident perpetrated by the LOCKBIT ransomware group. The attack, which came to light in late October 2023, is a vivid…
In recent months, Citrix systems have faced significant cybersecurity challenges. The discovery of critical vulnerabilities, notably CVE-2023-4966 (Citrix Bleed) and CVE-2023-4967, has put…
The Industrial and Commercial Bank of China (ICBC), the world’s largest commercial bank, experienced a ransomware attack on its U.S. arm, ICBC Financial Services (FS). This incident, occurring on…
Security researchers at Tenable discovered a significant vulnerability in Microsoft's Power Platform. This vulnerability allowed unauthorized access to cross-tenant applications and sensitive…
The recently discovered critical security vulnerability in PaperCut's NG/MF print management software, tracked as CVE-2023-39143 (NVD) , has brought attention to the potential risks posed by…
CVE-2023-21716 ( NVD ), a critical flaw in Microsoft Office Word's RTF parser, has been a focal point in the cybersecurity community since its private disclosure to Microsoft in November 2022.…
Ivanti has patched another critical vulnerability in its Endpoint Manager Mobile software (formerly MobileIron Core), which was exploited as a zero-day to breach the IT systems of several…
Zimbra Collaboration Suite (ZCS) is an open-source email collaboration suite widely used by a variety of organizations, including government agencies, universities, and companies. It has been the…
