Tag: advisory

AI Module Security Flaws in Drupal: MyCERT Urges Immediate Patching

Mar 17, 2025 9:52 AM

Tags: advisory, ai, computer, cybersecurity, flaw, remote-code-execution, risk, update

The Malaysia Computer Emergency Response Team (MyCERT) has reported several Drupal vulnerabilities within its AI module, specifically affecting versions prior to 1.0.5. This issue, outlined in a MyCERT advisory (MA-1292.032025), has raised cybersecurity concerns regarding potential remote code execution risks and the overall security of Drupal-powered websites. MyCERT has recommended that all users and administrators of Drupal promptly…
Imperva Protects Against the Apache Camel Vulnerabilities

Mar 15, 2025 6:52 AM

Tags: advisory, apache, cve, flaw, framework, vulnerability

Introduction: Understanding the Apache Camel Flaw On March 9, 2025, Apache released a security advisory for CVE-2025-27636, a vulnerability in the Apache Camel framework that allows attackers to bypass header filtering via miscased headers. Although rated as moderate, this vulnerability specifically affects configurations that use HTTP server components (such as camel-servlet, camel-jetty, camel-undertow, camel-platform-http, or……
Cisco Warns of Critical IOS XR Vulnerability Enabling DoS Attacks

Mar 14, 2025 1:52 PM

Tags: advisory, attack, cisco, cve, cyber, dos, service, software, vulnerability

Cisco has issued a security advisory warning of a vulnerability in its IOS XR Software that could allow attackers to launch denial-of-service (DoS) attacks. The vulnerability, identified as CVE-2025-20115, affects the Border Gateway Protocol (BGP) confederation implementation. The CVE-2025-20115 vulnerability affects the Border Gateway Protocol (BGP) confederation implementation in Cisco IOS XR Software, potentially allowing…
Live Ransomware Demo: See How Hackers Breach Networks and Demand a Ransom

Mar 14, 2025 1:52 PM

Tags: advisory, attack, breach, ciso, cyber, hacker, network, ransom, ransomware, threat

Cyber threats evolve daily. In this live webinar, learn exactly how ransomware attacks unfold”, from the initial breach to the moment hackers demand payment.Join Joseph Carson, Delinea’s Chief Security Scientist and Advisory CISO, who brings 25 years of enterprise security expertise. Through a live demonstration, he will break down every technical step of a ransomware…
CISA Releases Security Advisory on 13 Industrial Control System Threats

Mar 14, 2025 8:52 AM

Tags: advisory, cisa, control, cyber, threat, vulnerability

CISA issued thirteen Industrial Control Systems (ICS) advisories, highlighting current security issues and vulnerabilities in various systems. These advisories are crucial for maintaining the security and integrity of industrial operations. The affected products primarily include several Siemens systems, along with a Sungrow and a Philips product. Introduction to the Advisories CISA emphasizes the importance of…
Response to CISA Advisory (AA25-071A): #StopRansomware: Medusa Ransomware

Mar 13, 2025 11:52 PM

Tags: advisory, cisa, ransomware

AttackIQ has released a new assessment template in response to the CISA Advisory (AA25-071A) published on March 12, 2025, which details new behaviors exhibited by Medusa Ransomware. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/03/response-to-cisa-advisory-aa25-071a-stopransomware-medusa-ransomware/
CVE-2025-27363: FreeType Vulnerability in Meta Exploited in the Wild

Mar 13, 2025 3:52 PM

Tags: advisory, cve, cvss, exploit, flaw, open-source, vulnerability

Meta has issued a security advisory regarding a newly discovered vulnerability in the FreeType open-source font rendering library. Tracked as CVE-2025-27363, this flaw has been assigned a CVSS score of 8.1, categorizing it as a high-severity issue. Security experts warn… First seen on sensorstechforum.com Jump to article: sensorstechforum.com/cve-2025-27363-freetype-meta-vulnerability/
Medusa ransomware hit over 300 critical infrastructure organizations until February 2025

Mar 13, 2025 10:52 AM

Tags: advisory, cisa, infrastructure, ransomware, tactics

The Medusa ransomware operation hit over 300 organizations in critical infrastructure sectors in the United States until February 2025. The FBI, CISA, and MS-ISAC have issued a joint advisory detailing Medusa ransomware tactics, techniques, and indicators of compromise (IOCs) based on FBI investigations as recent as February 2025. This advisory is part of the #StopRansomware…
Medusa Ransomware Hits 300+ Critical Infrastructure Organizations Worldwide

Mar 13, 2025 9:52 AM

Tags: advisory, cyber, cybersecurity, infrastructure, ransomware, service

The Federal Bureau of Investigation (FBI), Cybersecurity and Infrastructure Security Agency (CISA), and the Multi-State Information Sharing and Analysis Center (MS-ISAC) have issued a joint advisory on the Medusa ransomware, a ransomware-as-a-service (RaaS) variant that has been active since June 2021. As of February 2025, Medusa has impacted over 300 victims across critical infrastructure sectors,…
More than 300 critical infrastructure orgs attacked by Medusa ransomware

Mar 12, 2025 9:55 PM

Tags: advisory, cisa, cybersecurity, group, infrastructure, insurance, ransomware, technology

An advisory from the FBI, Cybersecurity and Infrastructure Security Agency (CISA) and the Multi-State Information Sharing and Analysis Center (MS-ISAC) on Wednesday said the group and its affiliates have attacked organizations in the medical, education, legal, insurance, technology and manufacturing industries. First seen on therecord.media Jump to article: therecord.media/medusa-ransomware-targeting-critical-infrastructure-orgs
March Patch Tuesday warnings: Act fast to plug zero day holes in Windows, VMware

Mar 12, 2025 4:52 PM

Tags: access, advisory, authentication, cisco, cloud, communications, control, credentials, csf, cve, data, data-breach, exploit, flaw, incident response, infrastructure, microsoft, network, office, remote-code-execution, router, security-incident, service, software, unauthorized, update, vmware, vulnerability, windows, zero-day

Microsoft issues: Windows admins have to deal with patching six zero days, six critical vulnerabilities, plus the hole that already has a publicly available proof-of-concept.”All six of the vulnerabilities that Microsoft has labelled as ‘exploit detected’ are resolved with the monthly cumulative update,” pointed out Tyler Reguly, associate director of security R&D at Fortra. “This…
CISA worker says 100-strong red team fired after DOGE cancelled contract

Mar 12, 2025 4:52 PM

Tags: advisory, cisa, election, infosec, RedTeam

Election infosec advisory agency also shuttered First seen on theregister.com Jump to article: www.theregister.com/2025/03/12/cisa_staff_layoffs/
MirrorFace APT Using Custom Malware To Exploited Windows Sandbox Visual Studio Code

Mar 12, 2025 4:52 PM

Tags: advisory, apt, cyber, cybersecurity, exploit, group, malware, strategy, threat, windows

The cybersecurity landscape witnessed a significant development when the National Police Agency (NPA) and the National center of Incident readiness and Strategy for Cybersecurity (NISC) released a security advisory on January 8, 2025. This advisory highlighted an Advanced Persistent Threat (APT) campaign conducted by a group known as >>MirrorFace,
CISA Issues Advisory on Windows NTFS Flaw Enabling Local Code Execution

Mar 12, 2025 4:52 PM

Tags: advisory, cisa, cve, cyber, cybersecurity, flaw, infrastructure, microsoft, technology, unauthorized, vulnerability, windows

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued an advisory regarding a significant vulnerability in the Microsoft Windows New Technology File System (NTFS). This security flaw, identified as CVE-2025-24993, involves a heap-based buffer overflow vulnerability. The vulnerability could potentially allow an unauthorized attacker to execute code locally on affected systems. Overview of the…
Microsoft patches privilege escalation flaw exploited since 2023

Mar 12, 2025 4:52 PM

Tags: access, advisory, computer, cve, exploit, flaw, Hardware, intelligence, malicious, microsoft, remote-code-execution, software, tool, vulnerability, windows, zero-day

Vulnerabilities in file system drivers: Several of the other zero-day vulnerabilities are related to the Windows NT File System (NTFS) driver. One is a remote code execution flaw that can be triggered by the user mounting a specially crafted VHD (virtual hard disk) that triggers a buffer overflow (CVE-2025-24993).A similar vulnerability, CVE-2025-24985, that can be…
Google Warns Chromecast Owners Against Factory Reset

Mar 11, 2025 3:54 PM

Tags: advisory, authentication, cyber, google, risk

Google has issued a warning to Chromecast owners regarding the potential risks of performing a factory reset on their devices. This advisory comes as users have reported complications with device authentication after restoring their Chromecasts to factory settings. The warning highlights the importance of understanding the implications of a factory reset before proceeding. Background on…
CISOs and CIOs forge vital partnerships for business success

Mar 10, 2025 8:53 AM

Tags: advisory, ai, attack, breach, business, ceo, cio, ciso, cloud, communications, corporate, cybersecurity, data, data-breach, finance, firewall, framework, ibm, infrastructure, resilience, risk, risk-management, service, strategy, technology, threat

Vikram Nafde, EVP and CIO, Webster Bank Webster BankAs is the case at many companies, Webster Bank’s CISO Patty Voight reports into the CIO. While there is a direct line between the executive functions, Nafde says the structure is collaborative, not hierarchical, a significant evolution as the intensity of threats escalate, raising the bar for…
Cybersecurity Snapshot: CSA Outlines Data Security Challenges and Best Practices, While ISACA Offers Tips To Retain IT Pros

Mar 7, 2025 8:53 PM

Tags: advisory, ai, awareness, banking, best-practice, business, cloud, compliance, corporate, crime, crypto, cve, cyber, cybercrime, cybersecurity, data, defense, exploit, extortion, finance, fraud, governance, government, group, healthcare, infrastructure, iot, jobs, mail, malicious, microsoft, mitigation, monitoring, network, nis-2, privacy, qr, ransom, ransomware, regulation, resilience, risk, risk-assessment, risk-management, scam, service, strategy, technology, threat, tool, vmware, vulnerability, vulnerability-management, zero-day

Check out best practices for shoring up data security and reducing cyber risk. Plus, get tips on how to improve job satisfaction among tech staff. Meanwhile, find out why Congress wants federal contractors to adopt vulnerability disclosure programs. And get the latest on cyber scams; zero-day vulnerabilities; and critical infrastructure security. Dive into six things…
Multiple Jenkins Vulnerabilities Allow Attackers to Expose Secrets

Mar 7, 2025 2:53 PM

Tags: advisory, automation, cve, cyber, open-source, vulnerability

Jenkins, the widely-used open-source automation server, issued a high-priority security advisory on March 5, 2025, disclosing four medium-severity vulnerabilities affecting its core platform. The flaws”, tracked as CVE-2025-27622 through CVE-2025-27625″, impact secrets management, cross-site request forgery (CSRF) protections, and URL validation. Immediate upgrades to Jenkins 2.500 (weekly) or 2.492.2 (LTS) are recommended to mitigate risks.…
YouTube Alerts Creators About Phishing Emails Targeting Login Credentials

Mar 7, 2025 2:53 PM

Tags: advisory, ai, attack, ceo, credentials, cyber, deep-fake, email, exploit, login, malicious, phishing, social-engineering, tactics, tool

YouTube has issued a critical security advisory following a widespread phishing campaign exploiting private video sharing to distribute AI-generated deepfakes of CEO Neal Mohan. The fraudulent videos falsely claim changes to the platform’s monetization policies, urging creators to click malicious links. This sophisticated attack vector combines social engineering tactics with advanced generative AI tools, targeting…
Critical vulnerabilities expose network security risks in Keysight’s infrastructure

Mar 5, 2025 3:34 PM

Tags: access, advisory, attack, best-practice, cisa, control, cve, cyber, cybersecurity, data, defense, exploit, flaw, infrastructure, Internet, malicious, mitigation, network, risk, service, software, strategy, threat, unauthorized, update, vpn, vulnerability

Potential threats to enterprises: Successful exploitation of these vulnerabilities could have dire consequences, including system crashes, arbitrary file deletions, and unauthorized access to sensitive information. Attackers leveraging these flaws may gain control over affected devices, facilitating further attacks within an enterprise’s network.Furthermore, multiple path traversal vulnerabilities (CVE-2025-21095 and CVE-2025-23416) identified in the affected software versions…
0-day-Schwachstellen in VMWare ESXi, Workstation und Fusion

Mar 5, 2025 10:34 AM

Tags: advisory, cve, vmware, vulnerability, zero-day

Zum 4. März 2025 hat VMware by Broadcom einen Sicherheitshinweis veröffentlicht, um vor drei Zero-Day-Schwachstellen CVE-2025-22224, CVE-2025-22225 und CVE-2025-22226), die bereits in freier Wildbahn ausgenutzt wurden, zu warnen. Patchen ist dringend angesagt. VMware Advisory VMSA-2025-0004 Dem Advisory VMSA-2025-0004 zufolge betreffen die … First seen on borncity.com Jump to article: www.borncity.com/blog/2025/03/05/0-day-schwachstellen-in-vmware-esxi-workstation-und-fusion/
CVE-2025-22224, CVE-2025-22225, CVE-2025-22226: Zero-Day Vulnerabilities in VMware ESXi, Workstation and Fusion Exploited

Mar 5, 2025 9:34 AM

Tags: advisory, attack, cloud, cve, exploit, flaw, infrastructure, intelligence, leak, microsoft, threat, update, vmware, vulnerability, zero-day

Broadcom published an advisory for three flaws in several VMware products that were exploited in the wild as zero-days. Organizations are advised to apply the available patches. Background On March 4, Broadcom published an advisory (VMSA-2025-0004) for three zero-day vulnerabilities across multiple VMware products: CVE Description CVSSv3 CVE-2025-22224 VMware ESXi and Workstation Heap-Overflow Vulnerability 9.3…
VMware Warns Customers to Patch Actively Exploited Zero-Day Vulnerabilities

Mar 4, 2025 5:34 PM

Tags: advisory, cloud, exploit, software, update, vmware, vulnerability, zero-day

Cloud software firm VMware has issued a critical security advisory, detailing three zero-day vulnerabilities being actively exploited in the wild First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/vmware-patch-exploited-zero-day/
Palo Alto PAN-OS Bug Severity Upgraded, Exploited in Wild

Feb 25, 2025 2:23 PM

Tags: access, advisory, cve, exploit, vulnerability

Summary Earlier this month we published an advisory about CVE-2025-0108, a vulnerability which allows an unauthenticated attacker to access the web management user interface of First seen on research.kudelskisecurity.com Jump to article: research.kudelskisecurity.com/2025/02/25/palo-alto-pan-os-bug-severity-upgraded-exploited-in-wild/
How to create an effective incident response plan

Feb 25, 2025 11:23 AM

Tags: access, advisory, attack, backup, breach, business, ceo, ciso, communications, corporate, cyber, cybersecurity, email, endpoint, exploit, finance, governance, guide, incident, incident response, insurance, law, lessons-learned, malicious, monitoring, network, office, phone, ransomware, risk, security-incident, service, strategy, supply-chain, technology, threat, update

Establish a comprehensive post-incident communications strategy: Another key element that can make or break an incident response strategy is communications. Without clear communications among the major stakeholders of the business, a company might experience much longer downtimes or the loss of vital processes for extended periods.”How are you going to go about communicating? With whom?…
FBI and CISA warn about continuing attacks by Chinese ransomware group Ghost

Feb 21, 2025 10:24 PM

Tags: advisory, antivirus, attack, breach, china, cisa, data, email, encryption, extortion, group, malware, mitre, network, ransomware, service, theft, windows

Attacks are more focused on encryption than exfiltration: The Ghost attackers have sometimes exfiltrated data back to their Cobalt Strike Team servers or to the Mega.nz file-sharing service, but this has been rare and the amount of information stolen has been limited.According to FBI investigations, the group doesn’t regularly exfiltrate intellectual property or personally identifiable…
Critical UniFi Protect Camera Vulnerability Enables Remote Code Execution Attacks

Feb 21, 2025 4:23 PM

Tags: advisory, attack, cctv, cyber, flaw, hacking, network, remote-code-execution, vulnerability

Ubiquiti Networks has issued an urgent security advisory (Bulletin 046) warning of multiple critical vulnerabilities in its UniFi Protect camera ecosystem, including a high-severity remote code execution (RCE) flaw that could allow attackers to hijack devices and infiltrate network infrastructure. The vulnerabilities, discovered during the Pwn2Own 2025 hacking competition, affect UniFi Protect Cameras (firmware v4.74.88…
CISA and FBI Warn of Global Threat from Ghost Ransomware

Feb 20, 2025 11:47 AM

Tags: advisory, china, cisa, ransomware, threat

CISA and the FBI have released a joint advisory detailing the activity of China’s Ghost ransomware First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/cisa-fbi-warn-global-threat-ghost/
CISA FBI Warns that Ghost Ransomware Hits Over 70 Organizations

Feb 20, 2025 9:46 AM

Tags: advisory, cisa, cyber, cybersecurity, government, healthcare, infrastructure, network, ransomware

The Cybersecurity and Infrastructure Security Agency (CISA) and the Federal Bureau of Investigation (FBI) have issued a joint advisory warning about the widespread impact of the Ghost ransomware, also known as Cring. Since its emergence in early 2021, this ransomware has compromised over 70 organizations globally, spanning critical infrastructure, healthcare, education, government networks, and private…