44Articles
7Categories
2025-01-24Date
🚨
CISA Adds Five-Year-Old jQuery XSS Flaw to Exploited Vulnerabilities ListThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday placed a now-patched security flaw impacting the popular jQuery JavaScript library to its Known Exploited Vulnerabilities (KEV) catalog, based on evidence of active exploitation. The medium-severity vuln…
KEV
🚨
U.S. CISA adds JQuery flaw to its Known Exploited Vulnerabilities catalogsubmitted by kid to cybersecurity 4 points | 0 comments https://securityaffairs.com/173388/uncategorized/u-s-cisa-adds-jquery-flaw-known-exploited-vulnerabilities-catalog.html
KEV
🐛
CISA Warns of Old jQuery Vulnerability Linked to Chinese APT
KEV
🐛
370+ Ivanti Connect Secure Exploited Using 0-Day Vulnerability
🐛
SonicWall’s Secure Mobile Access appliance faces zero-day attacks
🐛
CVE-2025-21262 Microsoft Edge (Chromium-based) Spoofing Vulnerability
⚠️
Hackers Earn $886,000 at Pwn2Own Automotive 2025 for Charger, OS, Infotainment Exploits
⚠️
Android's New Identity Check Feature Locks Device Settings Outside Trusted Locations
⚠️
Android Kisok Tablets Vulnerability Let Attackers Control AC & Lights
⚠️
Juniper Routers Exploited via Magic Packet Vulnerability to Deploy Custom Backdoor
⚠️
Salt Typhoon Hacked Nine U.S. Telecoms, Tactics and Techniques Revealed
⚠️
US indicts five individuals in crackdown on North Korea’s illicit IT workforce
⚠️
Tricking the bad guys: realism and robustness are crucial to deception operations
⚠️
GDPR fines hit €1.2 billion in 2024 on 8.3% more breach reports
⚠️
AMD’s unpatched chip microcode glitch may require extreme measures by CISOs
⚠️
Only 7 percent of organizations recover data after paying a ransom in malware attacks
⚠️
FBI: North Korean IT workers steal source code to extort employers
⚠️
Akira Ransomware: A Shifting Force in the RaaS Domain
📢
CISA Releases Six ICS Advisories Details Security Issues
📢
PayPal Fined $2 Million Fine For Violating Cybersecurity Regulations
📢
PayPal Fined $2 Million Fine For Violating Cybersecurity Regulations
🔥
Millions Impacted by PowerSchool Data Breach
🔥
HellCat and Morpheus Ransomware Share Identical Payloads for Attacks
🔥
BASHE Ransomware Allegedly Leaked ICICI Bank Customers Data
🔥
Be careful what you say about data leaks in Turkey, new law could mean prison for reporting hacks
🔥
Grohe AG von Ransomware-Attacke betroffen
🔥
Prävention gegen Black Basta
🔥
Turkey | New Law Could Mean Prison for Reporting Data Leaks
🔥
84% of Healthcare Organizations Spotted a Cyberattack in the Late Year
🔥
ESXi Ransomware Attacks: Stealthy Persistence through SSH Tunneling
🔥
DoD defense contractor Stark AeroSpace potentially breached by INC ransomware
🔥
Stolen Credentials From Leading Cyber Security Vendors Selling For $10: Cyber Security Today, Friday, Jan 24, 2025
🕵️
US Charges Five People Over North Korean IT Worker Scheme
🕵️
Cyber Insights 2025: Social Engineering Gets AI Wings
🕵️
Palo Alto Networks Addresses Impact of BIOS, Bootloader Vulnerabilities on Its Firewalls
🕵️
DoJ Indicts 5 Individuals for $866K North Korean IT Worker Scheme Violations
🕵️
ISC Stormcast For Friday, January 24th, 2025 https://isc.sans.edu/podcastdetail/9294, (Fri, Jan 24th)
🕵️
Beware of Fake Captcha Verifications Spreading Lumma Malware
🕵️
KEYPLUG Infrastructure Exposed: Server Configurations and TLS Certificates Revealed
🕵️
AIDS vaccine non-profit suffers hacker attack
🕵️
Hundreds of fake Reddit sites push Lumma Stealer malware
🕵️
Entire Georgian country population exposed in a massive data leak
📡
2025 State of SaaS Backup and Recovery Report
📡
[Guest Diary] How Access Brokers Maintain Persistence, (Fri, Jan 24th)