critical vulnerability

Cybersecurity Threat Advisory: Critical GitLab bug

A critical vulnerability in GitLab, labelled CVE-2023-7028, is under active attack by threat actors to achieve account takeover, as reported

CISA, critical vulnerability, Cybersecurity Threat Advisory, Featured, Security, Syndicated

Cybersecurity Threat Advisory: Active exploits of Cisco firewalls

Two vulnerabilities, CVE-2024-20353 (denial of service) and CVE-2024-20359 (persistent local code execution), were leveraged to create backdoors by a state-sponsored cyber-espionage group,

Cisco, critical vulnerability, Cybersecurity Threat Advisory, DoS, Featured, firewalls, Security, Syndicated

Cybersecurity Threat Advisory: Active exploit of Atlassian Confluence

This Cybersecurity Threat Advisory details the exploitation of the critical vulnerability CVE-2023-22518 in the Atlassian Confluence Data Center and Server.

Atlassian Confluence, Cerber Ransomware, critical vulnerability, Cybersecurity Threat Advisory, Featured, ransomware, Security, Syndicated

Cybersecurity Threat Advisory: Critical vulnerability in Palo Alto PAN-OS

Palo Alto Networks has disclosed a critical vulnerability, CVE-2024-3400, impacting its PAN-OS software’s GlobalProtect feature. This flaw enables unauthenticated attackers

critical vulnerability, Cybersecurity Threat Advisory, Featured, Palo Alto Networks, PAN-OS, Security, Syndicated

Cybersecurity Threat Advisory: Two vulnerabilities found in D-Link NAS devices

Two vulnerabilities were found in legacy D-Link products that have reached end-of-life (EoL) status. The vulnerabilities can cause command injection

critical vulnerability, Cybersecurity Threat Advisory, D-Link, Featured, Security, Syndicated

Cybersecurity Threat Advisory: Critical Fortinet vulnerability

A critical vulnerability is affecting many Fortinet devices. Approximately 150,000 Fortinet OS and FortiProxy Secure Web Gateway systems are believed

critical vulnerability, Cybersecurity Threat Advisory, Featured, Fortinet, Fortinet vulnerability, Security, Syndicated

Cybersecurity Threat Advisory: OpenEdge authentication bypass vulnerability

A critical vulnerability (CVE-2024-1403) affecting Progress Software OpenEdge Authentication Gateway and AdminServer impacts versions 11.7.18 and earlier, 12.2.13 and earlier,

authentication bypass, critical vulnerability, Cybersecurity Threat Advisory, Featured, OpenEdge, Security, Syndicated

Cybersecurity Threat Advisory: TeamCity’s server vulnerabilities

This Cybersecurity Threat Advisory highlights JetBrains’ TeamCity vulnerabilities found in the CI/CD Server. One vulnerability allows unauthenticated access to an

critical vulnerability, Cybersecurity Threat Advisory, Featured, JetBrains, Security, Syndicated, TeamCity server

Cybersecurity Threat Advisory: Ivanti alerts of new high-severity flaws

During Ivanti’s announcement of their fixes for the recent critical zero-day vulnerabilities, the software vendor alerts of two new high-severity

CISA, critical vulnerability, Cybersecurity Threat Advisory, Featured, Ivanti, Security, Syndicated