Mid-2023 Cyber Threat Briefing for UK SME Sector
As we move through 2023, the cyber threat landscape continues to evolve, yet some things remain the same. The UK SME sector, like many others around the globe, continues to grapple with the same…
Tags /
#Vulnerability Management
118 reports
The Rising Threat of Abyss Locker Ransomware to VMware's ESXi Servers
A new emerging threat, Abyss Locker ransomware has been making headlines for its targeted attacks on VMware's ESXi virtualised environments. IOCs however seem sadly lacking.
The Hidden Dangers of Android's Patch Delays: N-Days Masquerading as Zero-Days
Google's annual 0-day vulnerability report has brought to light a persistent issue within the Android platform that increases the risk and usage of disclosed vulnerabilities for extended periods.…
CVE-2023-21716: A Critical Heap Corruption Vulnerability in Microsoft Word
CVE-2023-21716 ( NVD ), a critical flaw in Microsoft Office Word's RTF parser, has been a focal point in the cybersecurity community since its private disclosure to Microsoft in November 2022.…
The Cascading Effect of Vulnerability Discovery
The announcement of a Common Vulnerabilities and Exposures (CVE) identifier for a product often triggers a cascade of further vulnerability discoveries in the same product. This phenomenon, known…
Ivanti Patches another Zero-Day Exploited in Norwegian Government Attacks - Active Exploitation Observed
Ivanti has patched another critical vulnerability in its Endpoint Manager Mobile software (formerly MobileIron Core), which was exploited as a zero-day to breach the IT systems of several…
CVE-2023-37580 Zimbra Collaboration (ZCS) Cross-Site Scripting (XSS) Vulnerability
Zimbra Collaboration Suite (ZCS) is an open-source email collaboration suite widely used by a variety of organizations, including government agencies, universities, and companies. It has been the…
High Severity RCE Vulnerability in Atlassian's Confluence Data Center & Server
Atlassian, a leading provider of team collaboration and productivity software, has recently addressed a high severity Remote Code Execution (RCE) vulnerability in its Confluence Data Center &…
MikroTik RouterOS Vulnerability: CVE-2023-30799
In a recent blog post by VulnCheck, a vulnerability in MikroTik RouterOS was discussed in detail. The vulnerability, identified as CVE-2023-30799, affects MikroTik RouterOS up until version 6.49.8…
The Future of APT Analysis: Navigating the Evolving Threat Landscape
The cybersecurity landscape is a complex and ever-evolving space, with Advanced Persistent Threat (APT) actors and ransomware attackers continuously developing their skills and learning from their…
Threat Actor Profile: APT34
APT34, also known as OilRig, is a suspected Iranian cyber espionage threat group that has been operational since at least 2014. The group is believed to work on behalf of the Iranian government,…
Active Exploitation of Zero-Day Vulnerability (CVE-2023-38606) Affecting All Apple Products
The Centre for Cyber Security Belgium (CERT.be) has issued an advisory warning of an actively exploited zero-day vulnerability (CVE-2023-38606) affecting all Apple products. This vulnerability,…